CVE-2022-38202

CVE-2022-38202 is a path traversal vulnerability affecting Esri ArcGIS Server versions 10.9.1 and below. This flaw allows a remote, unauthenticated attacker to access files outside of the intended directory, potentially disclosing sensitive site configuration information. With a CVSS score of 7.5 (HIGH), it is easily exploitable over the network with low attack complexity, though it only impacts confidentiality. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.