CVE-2022-38613

MediumCVSS 6.5

Published: 09/09/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.83%

53th percentile - higher than 53% of all known CVEs

A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files on the system.

The risk involves potential leakage of sensitive data such as configurations, passwords, or customer data stored in system files.

It is recommended to immediately update SmartVista Cardgen to the latest version and implement file path validation in the application.

Original NVD description (English source)

A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files in the system.