CVE Catalog
CVE-2022-28945
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk1.63%
73th percentile - higher than 73% of all known CVEs
Summary
A directory traversal vulnerability was found in Webbank WeCube version 3.2.2. Attackers can exploit this issue by uploading a crafted ZIP file to access files outside the intended directory.
Risk Assessment
An attacker could gain unauthorized access to sensitive system files, potentially leading to data leakage or application compromise.
Recommendation
Update Webbank WeCube to the latest patched version immediately. As a temporary measure, restrict ZIP file uploads to trusted users only.
Original NVD description (English source)
An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted ZIP file.