CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-39296

MelisAssetManager provides deliveries of Melis Platform's assets located in every module's public folder. Attackers can read arbitrary files on affected versions of `melisplatform/melis-asset-manager`, leading to the disclosure of sensitive information. Conducting this attack does not require authentication. Users should immediately upgrade to `melisplatform/melis-asset-manager` >= 5.0.1. This issue was addressed by restricting access to files to intended directories only.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 37.9%

CVSS Severity

CVSS v3 Score 8.6

References

Products affected by CVE-2022-39296

Melistechnology » Melis-Asset-Manager » Version: 2.1

cpe:2.3:a:melistechnology:melis-asset-manager:2.1
Melistechnology » Melis-Asset-Manager » Version: 2.1.1

cpe:2.3:a:melistechnology:melis-asset-manager:2.1.1
Melistechnology » Melis-Asset-Manager » Version: 2.2.0

cpe:2.3:a:melistechnology:melis-asset-manager:2.2.0
Melistechnology » Melis-Asset-Manager » Version: 2.3.0

cpe:2.3:a:melistechnology:melis-asset-manager:2.3.0
Melistechnology » Melis-Asset-Manager » Version: 2.4.0

cpe:2.3:a:melistechnology:melis-asset-manager:2.4.0
Melistechnology » Melis-Asset-Manager » Version: 2.5.0

cpe:2.3:a:melistechnology:melis-asset-manager:2.5.0
Melistechnology » Melis-Asset-Manager » Version: 2.5.1

cpe:2.3:a:melistechnology:melis-asset-manager:2.5.1
Melistechnology » Melis-Asset-Manager » Version: 3.0.0

cpe:2.3:a:melistechnology:melis-asset-manager:3.0.0
Melistechnology » Melis-Asset-Manager » Version: 3.0.1

cpe:2.3:a:melistechnology:melis-asset-manager:3.0.1
Melistechnology » Melis-Asset-Manager » Version: 3.0.2

cpe:2.3:a:melistechnology:melis-asset-manager:3.0.2
Melistechnology » Melis-Asset-Manager » Version: 3.0.3

cpe:2.3:a:melistechnology:melis-asset-manager:3.0.3
Melistechnology » Melis-Asset-Manager » Version: 3.1.0

cpe:2.3:a:melistechnology:melis-asset-manager:3.1.0
Melistechnology » Melis-Asset-Manager » Version: 3.1.1

cpe:2.3:a:melistechnology:melis-asset-manager:3.1.1
Melistechnology » Melis-Asset-Manager » Version: 3.1.2

cpe:2.3:a:melistechnology:melis-asset-manager:3.1.2
Melistechnology » Melis-Asset-Manager » Version: 3.2.0

cpe:2.3:a:melistechnology:melis-asset-manager:3.2.0
Melistechnology » Melis-Asset-Manager » Version: 3.2.1

cpe:2.3:a:melistechnology:melis-asset-manager:3.2.1
Melistechnology » Melis-Asset-Manager » Version: 3.2.2

cpe:2.3:a:melistechnology:melis-asset-manager:3.2.2
Melistechnology » Melis-Asset-Manager » Version: 3.2.3

cpe:2.3:a:melistechnology:melis-asset-manager:3.2.3
Melistechnology » Melis-Asset-Manager » Version: 3.2.4

cpe:2.3:a:melistechnology:melis-asset-manager:3.2.4
Melistechnology » Melis-Asset-Manager » Version: 3.2.5

cpe:2.3:a:melistechnology:melis-asset-manager:3.2.5
Melistechnology » Melis-Asset-Manager » Version: 3.2.6

cpe:2.3:a:melistechnology:melis-asset-manager:3.2.6
Melistechnology » Melis-Asset-Manager » Version: 4.0.0

cpe:2.3:a:melistechnology:melis-asset-manager:4.0.0
Melistechnology » Melis-Asset-Manager » Version: 4.0.1

cpe:2.3:a:melistechnology:melis-asset-manager:4.0.1
Melistechnology » Melis-Asset-Manager » Version: 4.1.0

cpe:2.3:a:melistechnology:melis-asset-manager:4.1.0
Melistechnology » Melis-Asset-Manager » Version: 5.0.0

cpe:2.3:a:melistechnology:melis-asset-manager:5.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-39296

Products

Pricing

Contact Us