high7.5
CVE-2022-37700
Zentao Demo15 is vulnerable to Directory Traversal.
Impact
Zentao Demo15 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: URL : view-source:https://demo15.zentao.pm/user-login.html/zentao/index.php?mode=getconfig.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easycorp | Zentao | Version 15.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://demo15.zentao.pm/user-login.html/zentao/index.php?mode=getconfig
- https://medium.com/@sc0p3hacker/cve-2022-37700-directory-transversal-in-zentao-easy-soft-alm-2573c1f0fc21
- https://demo15.zentao.pm/user-login.html/zentao/index.php?mode=getconfig
- https://medium.com/%40sc0p3hacker/cve-2022-37700-directory-transversal-in-zentao-easy-soft-alm-2573c1f0fc21