Security Advisory

CVE-2022-40977

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-11-24 09:20:22
Last updated 2025-04-24 19:47:34
Assigner CERTVDE
State PUBLISHED

Description

A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configuration file to trigger arbitrary file writes (zip-slip). File writes do not affect confidentiality or availability.