CVE-2022-4778mediumCWE-22

CVE-2022-4778: medium-severity vulnerability in elvexys StreamX

path traversal in elvexys StreamX using StreamView HTML component with public web server feature

Published · Updated

Follow this CVE+ Monitor StreamX

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.7%
StreamX applications from versions 6.02.01 to 6.04.34 are affected by a path traversal vulnerability that allows authenticated users to get unauthorized access to files on the server's filesystem. StreamX applications using StreamView HTML component with the public web server feature activated are affected.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
elvexys · StreamX
Related CVEs — elvexys StreamX

In the same product, most dangerous first.

CVE-2022-4779HIGHauthentication bypass in elvexys StreamX using StreamView HTML component with public web server featureEPSS 1.3%