Arbitrary File Read Affecting sscms package, versions [0,]
Snyk CVSS
Attack Complexity
Low
Privileges Required
High
Confidentiality
High
Threat Intelligence
Exploit Maturity
Proof of concept
EPSS
0.06% (26th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-DOTNET-SSCMS-3324074
- published 17 Feb 2023
- disclosed 17 Feb 2023
- credit Chaitin Security Research Lab
Introduced: 17 Feb 2023
CVE-2022-44299 Open this link in a new tabHow to fix?
A fix was pushed into the master
branch but not yet published.
Overview
Affected versions of this package are vulnerable to Arbitrary File Read via the ReadTextAsync
method due to missing filtering.