Vulnerabilities > CVE-2022-4772 - Unspecified vulnerability in Widoco Project Widoco

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

widoco-project

NVD

Published: 2022-12-27

Updated: 2024-11-21

Summary

A vulnerability was found in Widoco and classified as critical. Affected by this issue is the function unZipIt of the file src/main/java/widoco/WidocoUtils.java. The manipulation leads to path traversal. It is possible to launch the attack on the local host. The name of the patch is f2279b76827f32190adfa9bd5229b7d5a147fa92. It is recommended to apply a patch to fix this issue. VDB-216914 is the identifier assigned to this vulnerability.

Vulnerable Configurations

Part	Description	Count
Application	Widoco_Project Widoco Project Widoco - Widoco Project Widoco 0.0.1 Widoco Project Widoco 1.0.0 Widoco Project Widoco 1.1.0 Widoco Project Widoco 1.1.1 Widoco Project Widoco 1.2.0 Widoco Project Widoco 1.2.1 Widoco Project Widoco 1.2.2 Widoco Project Widoco 1.2.3 Widoco Project Widoco 1.3.0 Widoco Project Widoco 1.3.1 Widoco Project Widoco 1.4.0 Widoco Project Widoco 1.4.1 Widoco Project Widoco 1.4.2 Widoco Project Widoco 1.4.3 Widoco Project Widoco 1.4.4 Widoco Project Widoco 1.4.5 Widoco Project Widoco 1.4.6 Widoco Project Widoco 1.4.7 Widoco Project Widoco 1.4.8 Widoco Project Widoco 1.4.9 Widoco Project Widoco 1.4.10 Widoco Project Widoco 1.4.11 Widoco Project Widoco 1.4.12 Widoco Project Widoco 1.4.13 Widoco Project Widoco 1.4.14 Widoco Project Widoco 1.4.15 Widoco Project Widoco 1.4.15_0 Widoco Project Widoco 1.4.15_1 Widoco Project Widoco 1.4.16 Widoco Project Widoco 1.4.17	31

Summary

Vulnerable Configurations

References