CVE-2022-39034 — Smart eVision - Path Traversal -2

CVE-2022-39034

Smart eVision - Path Traversal -2 PUBLISHED

Description (CNA)

Smart eVision has a path traversal vulnerability in the Report API function due to insufficient filtering for special characters in URLs. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication, access restricted paths and download system files.

Affected (CNA)

Vendor / product	Versions
Smart eVision Information Technology Inc. / Smart eVision	affected 2022.02.21

CWE

CWE-22

References

https://www.twcert.org.tw/tw/cp-132-6571-fc930-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-6571-fc930-1.html

CISA-ADP

No English description supplied.

No references supplied.