Security Advisory

CVE-2022-35410

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-07-08 17:35:23

Last updated 2024-08-03 09:36:44

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive.

← Browse all CVEs View on cve.org ↗