high7.2
CVE-2022-45184
The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a rem…
Impact
The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with administrator privilege to create, delete, update, and display files outside of the configuration directory via a crafted HTTP request to particular endpoints in the web server. Patched Versions are 3.5.3 and 3.4.7.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ironmansoftware | Powershell Universal | from 3.0.0 before 3.4.7 from 3.5.0 before 3.5.3 |