CVE-2022-0665: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

February 22, 2022 (updated March 1, 2022)

Path Traversal in GitHub repository pimcore/pimcore prior to 10.3.2.

References

github.com/pimcore/pimcore/commit/28945649a6234ccaa8c94c6cd83d1954603baf3e
huntr.dev/bounties/423df64d-c591-4ad9-bf1c-411bcbc06ba3
nvd.nist.gov/vuln/detail/CVE-2022-0665

Detect and mitigate CVE-2022-0665 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →