CVE-2022-2653

With this vulnerability an attacker can read many sensitive files like configuration files, or the /proc/self/environ file, that contains the environment variable used by the web server that includes database credentials. If the web server user is root, an attacker will be able to read any file in the system.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v3.0

7.1 HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

EPSS

0.96% chance of exploitation in the next 30 days, 59th percentile

Published

2022-08-04

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/5dff7cf9-8bb2-4f67-a02d-b94db5009d70

References

• CVE Record
• NVD entry

Related

• CVE-2022-26521
• CVE-2022-26531
• CVE-2022-2652
• CVE-2022-2654
• CVE-2022-26518
• CVE-2022-26546