CVE-2022-28451: Path Traversal
Published May 1, 2022
·Updated
nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature.
Affected Software
1 affected component
Nopcommerce NopCommerce=4.50.1
Remediation
Event History
May 1, 2022
CVE Published
via MITRE·11:12 PM
Data Sourced
via MITRE·11:12 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-28451?
CVE-2022-28451 is classified as a moderate severity vulnerability that allows directory traversal in nopCommerce 4.50.1.
2
How do I fix CVE-2022-28451?
To fix CVE-2022-28451, it is recommended to update nopCommerce to a version that addresses this directory traversal issue.
3
What software is affected by CVE-2022-28451?
CVE-2022-28451 affects nopCommerce version 4.50.1 specifically.
4
What type of vulnerability is CVE-2022-28451?
CVE-2022-28451 is a directory traversal vulnerability that can be exploited via the backup file feature in the Maintenance section.
5
Can CVE-2022-28451 lead to unauthorized access?
Yes, CVE-2022-28451 can potentially lead to unauthorized access to sensitive files on the server.