CVE-2022-44008

An issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation, arbitrary local files can be retrieved by accessing the back-end Tomcat server directly.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2022-11-16

Last modified

2025-04-30

Weaknesses

CWE-22

Affected products

• Backclick (Backclick)

References

• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-037.txt