← Database

CVE-2022-38301

HIGH CVSS: 8.8 Published: 2022-09-14 Modified: 2026-06-17

Description

Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib.

Affected Platforms

Onedev Project Onedev

Weakness Type

CWE-22

References