CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.7. See the original NVD description below for full technical details.
CVE
CVE-2022-1359
Severity
MEDIUM
CVSS
5.7
EPSS
0.95%
Original NVD Description
The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route. If an attacker supplied path traversal charters (../) as part of a filename, the server will save the file where the attacker chooses. This could allow an attacker to write any data to any file in the server.
Related CVEs
Other vulnerabilities affecting the same vendor(s)