CVE-2022-3060

HIGH Year: 2022
CVSS v3 Score
7.3
High
Weakness Type
CWE-22
View all →

Vulnerability Description

Improper control of a resource identifier in Error Tracking in GitLab CE/EE affecting all versions from 12.7 allows an authenticated attacker to generate content which could cause a victim to make unintended arbitrary requests

Related Vulnerabilities

CVE-2016-10037

HIGH
CVSS:7.3(High)

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id (aka dir) parameter, rel...

CWE-222016

CVE-2016-10038

HIGH
CVSS:7.3(High)

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to b...

CWE-222016

CVE-2016-10039

HIGH
CVSS:7.3(High)

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to b...

CWE-222016

CVE-2017-7358

HIGH
CVSS:7.3(High)

In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path locations and escalate privileges to root when the guest user l...

CWE-222017

CVE-2019-3696

HIGH
CVSS:7.3(High)

A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance...

CWE-222019

CVE-2019-6754

HIGH
CVSS:7.3(High)

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10826. User interaction is required to exploit this vulnerability in that the targe...

CWE-222019