Unrated

Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR f...

CVE-2022-38301 First seen on SecPulse Sep 15, 2022

Original description The description as published by the source.

Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
patch github.com
web research.loginsoft.com

Key facts

Severity: Unrated
Published: Sep 15, 2022
First seen on SecPulse: Sep 15, 2022

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:00