← All advisories

Critical severity9.1NVD Advisory· Published Feb 24, 2022· Updated Jun 17, 2026

CVE-2022-25098

CVE-2022-25098

Description

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
ectouch/ectouchPackagist	<= 2.7.2	—

Affected products

2

ECTouch/ECTouchdescription
ghsa-coords
pkg:composer/ectouch/ectouch
Range: <= 2.7.2

Patches

Vulnerability mechanics

References

3

github.com/advisories/GHSA-ph62-8768-r87vghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-25098ghsaADVISORY
github.com/dota-st/Vulnerability/blob/master/ECTouchV2.mdnvdBroken LinkWEB

News mentions

0

No linked articles in our index yet.