CVE-2022-4878 is a critical path traversal vulnerability found in the ZipUtil function within the modules/common/app/utils/common/ZipUtil.java file of the JATOS application's ZIP Handler component. This vulnerability allows an unauthenticated attacker to manipulate file paths, potentially leading to unauthorized file access or modification. While the CVSS score is 5.3 (Medium), the vulnerability is easily exploitable over the network with low attack complexity, though it currently has no known active exploits, public exploit code, or significant community discussion. Organizations using JATOS are advised to upgrade to version 3.7.5-alpha to remediate this issue.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.7.5CPE matchmatch criteria | cpe:2.3:a:jatos:jatos:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.