CVE-2022-25882

CVE-2022-25882 is a Directory Traversal vulnerability affecting versions of the onnx package prior to 1.13.0, allowing an attacker to access files outside the intended directory via the external_data field. This vulnerability has a CVSS score of 7.5 (HIGH), indicating a severe risk with a network-based attack vector and low attack complexity, potentially leading to high confidentiality impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.