High severity · published Feb 21, 2022
CVE-2022-25297
Arbitrary File Write
8.8
CVSS
1.6%
EPSS
No
On KEV
Description
This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save() method may enable attackers to write files to arbitrary locations outside the designated target folder.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DR
drogonframework/drogon ·
before 1.7.5 · source: vendor
DR
Drogon · Drogon
before 1.7.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-25297
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-25297
Patch
https://github.com/drogonframework/drogon/commit/3c785326c63a34aa1799a639ae185bc9453cb447
Exploit
https://github.com/drogonframework/drogon/pull/1174
Exploit
https://snyk.io/vuln/SNYK-UNMANAGED-DROGONFRAMEWORKDROGON-2407243
More from drogonframework/drogon
6.1
CVE-2023-26137
All versions of the package drogonframework/drogon are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values in the addHeader and…
4.3
CVE-2023-26138
All versions of the package drogonframework/drogon are vulnerable to CRLF Injection when untrusted user input is used to set request headers in the addHeader function