CVE-2022-42188

Summary

In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/LavaLite

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

References

• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/LavaLite

• ←Previous
• Next→