CVE-2022-1850: Path Traversal in FileGator
Published May 24, 2022
·Updated
Path Traversal in FileGator
Other sources
Path Traversal in GitHub repository filegator/filegator prior to 7.8.0.
— MITRE
Affected Software
3 affected componentsFixes available
filegator filegator<7.8.0
composer/filegator/filegator<7.8.0
7.8.0
composer/filegator/filegator<7.8.0
7.8.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/filegator/filegatorto a version that resolves this vulnerability.Fixed in 7.8.0
Event History
May 24, 2022
CVE Published
via MITRE·12:10 PM
Data Sourced
via MITRE·12:10 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 25, 2022
Advisory Published
via GitHub·12:00 AM
Data Sourced
via GitHub·12:00 AM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via Packagist·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which deployments are affected?
FileGator deployments using versions prior to 7.8.0 are affected. Version 7.8.0 or later is needed to address the issue.
2
What level of access does an attacker need?
The CVSS vector indicates that an attacker needs low-level privileges and can exploit the issue over the network without user interaction. The impact includes high confidentiality and integrity impact.
3
Is a patch available?
Yes. A patch is available, including the referenced upstream commit 6e2b68f17f48cdc1d6a4a93a2369d2069fe64989.