Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-4778 EUVD-2022-52074GHSA-f6gm-jc8c-7qrm

path traversal in elvexys StreamX using StreamView HTML component with public web server feature

Published Dec 28, 2022 · Updated Apr 9, 2025 · Assigned by NCSC.ch

Description

StreamX applications from versions 6.02.01 to 6.04.34 are affected by a path traversal vulnerability that allows authenticated users to get unauthorized access to files on the server's filesystem.
StreamX applications using StreamView HTML component with the public web server feature activated are affected.

Affected products

VendorProductAffectedFixed
elvexys StreamX 6.02.01 – ≤ 6.04.34 —

References