Skip to content
OpenAdvisories
High · 8.4 CVE-2022-43451 EUVD-2022-46453GHSA-pmwg-pqhj-8m9m

Multiple path traversal in appspawn and nwebspawn services.

Published Nov 3, 2022 · Updated Aug 3, 2024 · Assigned by OpenHarmony

Description

OpenHarmony-v3.1.2 and prior versions had an Multiple path traversal vulnerability in appspawn and nwebspawn services. Local attackers can create arbitrary directories or escape application sandbox.If chained with other vulnerabilities it would allow an unprivileged process to gain full root privileges.

Affected products

VendorProductAffectedFixed
OpenHarmony OpenHarmony 3.1.0 —

References