High severity · published Sep 25, 2023
CVE-2022-4244
A flaw was found in codeplex-codehaus
7.5
CVSS
1.3%
EPSS
No
On KEV
Description
A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IC
Integration Camel K · Redhat
before 1.10.1 · source: NVD
PL
Plexus-utils · Codehaus-plexus
before 3.0.24 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-4244
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-4244
Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:2135
Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:3906
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-4244
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2149841
More from Plexus-utils
9.8
CVE-2017-1000487
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings
8.8
CVE-2025-67030
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642
4.3
CVE-2022-4245
A flaw was found in codehaus-plexus
