CVE-2022-45184

published 2022-11-14

CVE-2022-45184: The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a…

Priority P3 46 high 7.2 CVSS 3.1

AV N AC L PR H UI N S U C H I H A H

The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with administrator privilege to create, delete, update, and display files outside of the configuration directory via a crafted HTTP request to particular endpoints in the web server. Patched Versions are 3.5.3 and 3.4.7.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ironmansoftware	powershell_universal	>= 3.0.0 < 3.4.7	3.4.7
ironmansoftware	powershell_universal	>= 3.5.0 < 3.5.3	3.5.3

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22