CVE-2022-40977

Publication date

2022-11-24 09:20:22

Family

CERTVDE

State

PUBLISHED

Description

A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configuration file to trigger arbitrary file writes (zip-slip). File writes do not affect confidentiality or availability.