CVE-2022-31372

    Dashboard / Vulnerabilities / CVE-2022-31372

    CVE-2022-31372

    Published: 16 Jun 2022Last Modified: 12 Aug 2026

    Summary:

    Details: Wiris Mathtype v7.28.0 was discovered to contain a path traversal vulnerability in the resourceFile parameter. This vulnerability is exploited via a crafted request to the resource handler.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31372.json, https://nvd.nist.gov/vuln/detail/CVE-2022-31372, https://github.com/wiris/moodle-filter_wiris/commit/037ce9c1d9b9642689a332b6ebee8eaf0a737576

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- c55e39c8f093dfc384951fe512d4e9a46cdb7144
    Fixed -037ce9c1d9b9642689a332b6ebee8eaf0a737576

    Affected versions

    7.28.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High