CVE-2022-3940

A vulnerability, which was classified as problematic, was found in lanyulei ferry. This affects an unknown part of the file apis/process/task.go. The manipulation of the argument file_name leads to path traversal. The associated identifier of this vulnerability is VDB-213447.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cna@vuldb.com

Published

2022-11-11

Last modified

2025-04-15

Weaknesses

CWE-22

Affected products

• Ferry (Ferry Project)
• Ferry (Lanyulei)

References

• https://vuldb.com/?id.213447