Skip to content
OpenAdvisories
Medium · 4.7 CVE-2022-4402 EUVD-2022-51750GHSA-6x8q-mcvj-v6v9

RainyGao DocSys ZIP File Decompression path traversal

Published Dec 11, 2022 · Updated Apr 15, 2025 · Assigned by VulDB

Description

A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-215271.

Affected products

VendorProductAffectedFixed
RainyGao DocSys 2.02.37 —

References