Vulnerabilities > CVE-2022-39296 - Unspecified vulnerability in Melistechnology Melis-Asset-Manager

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

melistechnology

NVD

Published: 2022-10-11

Updated: 2024-11-21

Summary

MelisAssetManager provides deliveries of Melis Platform's assets located in every module's public folder. Attackers can read arbitrary files on affected versions of `melisplatform/melis-asset-manager`, leading to the disclosure of sensitive information. Conducting this attack does not require authentication. Users should immediately upgrade to `melisplatform/melis-asset-manager` >= 5.0.1. This issue was addressed by restricting access to files to intended directories only.

Vulnerable Configurations

Part	Description	Count
Application	Melistechnology Melistechnology Melis Asset Manager 2.1 Melistechnology Melis Asset Manager 2.1.1 Melistechnology Melis Asset Manager 2.2.0 Melistechnology Melis Asset Manager 2.3.0 Melistechnology Melis Asset Manager 2.4.0 Melistechnology Melis Asset Manager 2.5.0 Melistechnology Melis Asset Manager 2.5.1 Melistechnology Melis Asset Manager 3.0.0 Melistechnology Melis Asset Manager 3.0.1 Melistechnology Melis Asset Manager 3.0.2 Melistechnology Melis Asset Manager 3.0.3 Melistechnology Melis Asset Manager 3.1.0 Melistechnology Melis Asset Manager 3.1.1 Melistechnology Melis Asset Manager 3.1.2 Melistechnology Melis Asset Manager 3.2.0 Melistechnology Melis Asset Manager 3.2.1 Melistechnology Melis Asset Manager 3.2.2 Melistechnology Melis Asset Manager 3.2.3 Melistechnology Melis Asset Manager 3.2.4 Melistechnology Melis Asset Manager 3.2.5 Melistechnology Melis Asset Manager 3.2.6 Melistechnology Melis Asset Manager 4.0.0 Melistechnology Melis Asset Manager 4.0.1 Melistechnology Melis Asset Manager 4.1.0 Melistechnology Melis Asset Manager 5.0.0	25

Summary

Vulnerable Configurations

References