QwikSec

Security Database

CVE

CWE

Training

CVE-2022-42725

Published: Oct 10, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by symbolic directory links.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/linuxmint/warpinator/commit/5244c33d4c109ede9607b9d94461650410e2cddc

https://github.com/linuxmint/warpinator/commit/f4907ef6a17a189d56ab0a9da4b53190b061ad75

https://github.com/linuxmint/warpinator/commit/8bfd2f8b3f1b0c0f0a5a6d275702d107b9e08a94

https://github.com/linuxmint/warpinator/commit/95124fd4468683dd69ddd7b3da0e9906ce6beae2

[oss-security] 20221024 Warpinator remote file creation / overwrite security issue (CVE-2022-42725)

mailing-list

[oss-security] 20230426 Warpinator: Remote file deletion vulnerability (CVE-2023-29380)

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.