CVE-2022-41951

CVE-2022-41951 is a critical path traversal vulnerability in OroPlatform, affecting versions prior to 5.0.9. This flaw allows an unauthenticated attacker to write arbitrary content to new files on the server by manipulating file paths, potentially leading to full system compromise. With a CVSS score of 9.8, it presents a severe risk due to its network-based attack vector and low complexity, enabling complete confidentiality, integrity, and availability impact. While there are no known active exploits or public exploit modules like Metasploit, the vulnerability has garnered significant community discussion, indicating potential interest in developing exploits.