VulnerabilityModified
CVE-2022-22790
SYNEL - eharmony Directory Traversal.
HIGH 7.5EPSS 1.02%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.02%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
SYNEL - eharmony Directory Traversal. Directory Traversal - is an attack against a server or a Web application aimed at unauthorized access to the file system. on the "Name" parameter the attacker can return to the root directory and open the host file. The path exposes sensitive files that users upload
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 1.02% probability · 62th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- synel/eharmony
- Source
- cna@cyber.gov.il
References
- https://www.gov.il/en/departments/faq/cve_advisoriesThird Party Advisory, VDB Entry
- https://www.gov.il/en/departments/faq/cve_advisoriesThird Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.