CVE-2022-24992 is a directory traversal vulnerability in the process.php component of QR Code Generator v5.2.7. This allows unauthenticated attackers to read arbitrary files on the server with high confidentiality impact, as reflected by its CVSS score of 7.5 (High). While no public exploits (Metasploit, Nuclei, ExploitDB) are currently available and there is no evidence of active exploitation, the vulnerability has a FAUCET Risk Score of 59/100, indicating a moderate potential risk. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 5.2.7CPE matchmatch criteria | cpe:2.3:a:qr_code_generator_project:qr_code_generator:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.