CVE-2022-34271 — Apache Atlas: zip path traversal in import functionality

CVE-2022-34271

Apache Atlas: zip path traversal in import functionality PUBLISHED

Description (CNA)

A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from 0.8.4 to 2.2.0.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Atlas	affected 0.8.4 before 2.3.0

CWE

CWE-22

References

https://lists.apache.org/thread/0rqvcxo6brmos9w3lzfsdn2lsmlblpw3

ADP enrichment

CVE

No English description supplied.

https://lists.apache.org/thread/0rqvcxo6brmos9w3lzfsdn2lsmlblpw3

CISA-ADP

No English description supplied.

No references supplied.