CVE-2022-29511
Assigner: talos
Published: 2022-12-01T00:00:00
State: PUBLISHED
datePublic: 2022-12-01T00:00:00
descriptions: value: A directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.
affected: vendor: Lansweeper
product: lansweeper
versions: version: 10.1.1.0
status: affected
metrics: cvssV3_0: version: 3.0
vectorString: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 9.1
baseSeverity: CRITICAL
problemTypes: descriptions: type: CWE
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
cweId: CWE-22