Onedev 7.4.14 Path Traversal via JAR upload to /opt/onedev/lib
CVE-2022-38301 Published on September 14, 2022
Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib.
Products Associated with CVE-2022-38301
Want to know whenever a new CVE is published for Onedevproject Onedev? stack.watch will email you.
Exploit Probability
EPSS
0.64%
Percentile
70.90%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.