CVE Feed

    Dashboard / CVE / CVE-2022-2653

    CVE-2022-2653

    With this vulnerability an attacker can read many sensitive files like configuration files, or the /proc/self/environ file, that contains the environment variable used by the web server that includes database credentials. If the web server user is root, an attacker will be able to read any file in the system.

    Published:Aug 4, 2022
    Last Modified:Nov 21, 2024
    EPS:Aug 4, 2022
    EPSS Score:0.0035
    CVSS Score:6.5

    Affected Products

    Vendor
    Planka
    Product
    Planka

    Exploits

    https://huntr.dev/bounties/5dff7cf9-8bb2-4f67-a02d-b94db5009d70https://huntr.dev/bounties/5dff7cf9-8bb2-4f67-a02d-b94db5009d70

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High