Search vulnerabilities

Results 1

Export CSV
CVE-2022-40977

PILZ: PASvisu and PMI affected by ZipSlip

A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products