CVE-2022-37700
published 2022-09-19CVE-2022-37700: Zentao Demo15 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: URL…
PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
2.72%
84.2th percentile
Zentao Demo15 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: URL : view-source:https://demo15.zentao.pm/user-login.html/zentao/index.php?mode=getconfig.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| easycorp | zentao | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://zentao.comhttps://demo15.zentao.pm/user-login.html/zentao/index.php?mode=getconfighttps://medium.com/%40sc0p3hacker/cve-2022-37700-directory-transversal-in-zentao-easy-soft-alm-2573c1f0fc21http://zentao.comhttps://demo15.zentao.pm/user-login.html/zentao/index.php?mode=getconfighttps://medium.com/%40sc0p3hacker/cve-2022-37700-directory-transversal-in-zentao-easy-soft-alm-2573c1f0fc21
2022-09-19
Published