CVE-2022-22914

7.5 highEPSS 1.4%

High (7.5) in ovidentia ovidentia. EPSS 1.4% chance of exploitation in the next 30 days.

An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to view and download content in the upload directory via path traversal.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2022-02-17
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

ovidentia:ovidentia

References

https://gitlab.com/albadotpy/ovidentia-information-disclosure-on-upload-directory-content
https://gitlab.com/albadotpy/ovidentia-information-disclosure-on-upload-directory-content

Check your stack JSON