CVE-2022-35410 log
| Source |
|
| Severity | Unknown |
| Remote | No |
| Type | Directory traversal |
| Description | mat2 before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-2798 | mat2 | 0.12.4-1 | 0.13.0-1 | Unknown | Fixed |
| References |
|---|
https://0xacab.org/jvoisin/mat2/-/commit/beebca4bf1cd3b935824c966ce077e7bcf610385 https://0xacab.org/jvoisin/mat2/-/issues/174 https://dustri.org/b/mat2-0130.html |
| Notes |
|---|
this package does not include mat2-web |