CVE-2022-48482: Path Traversal
First published: Tue May 02 2023(Updated: )
3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electron/download directory traversal. Files may have credentials, full backups, call recordings, and chat logs.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| 3CX 3CX | <18.0.2.315 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID is CVE-2022-48482.
What is the severity level of CVE-2022-48482?
CVE-2022-48482 has a severity level of 7.5 (high).
What is affected by CVE-2022-48482?
3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows is affected by CVE-2022-48482.
How can unauthenticated remote attackers exploit CVE-2022-48482?
Unauthenticated remote attackers can exploit CVE-2022-48482 by reading certain files via /Electron/download directory traversal.
What kind of files can be accessed by exploiting CVE-2022-48482?
By exploiting CVE-2022-48482, attackers can potentially access files containing credentials, full backups, call recordings, and chat logs.
- collector/nvd-latest
- agent/references
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/author
- agent/weakness
- agent/severity
- agent/softwarecombine
- agent/description
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/3cx
- canonical/3cx 3cx
- vendor/microsoft
- canonical/microsoft windows