CVE-2023-22892

There exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by unauthenticated users to read arbitrary files from Zephyr instances.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2023-03-08

Last modified

2025-03-04

Weaknesses

CWE-668

Affected products

• Zephyr Enterprise (Smartbear)

References

• https://smartbear.com/security/cve/