cbcvebase.

0Xacab Mat2 vulnerabilities

1 known vulnerability affecting 0xacab/mat2.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2022-35410P3HIGHCVSS 7.5fixed in 0.13.02022-07-08
CVE-2022-35410 [HIGH] CWE-22 CVE-2022-35410: mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZI mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive.
ghsanvdosv
0Xacab Mat2 vulnerabilities | cvebase