Medium severity5.9NVD Advisory· Published Mar 25, 2022· Updated Jun 17, 2026
CVE-2022-27906
CVE-2022-27906
Description
Mendelson OFTP2 before 1.1 b43 is affected by directory traversal. To access the vulnerable code path, the attacker has to know one of the configured Odette IDs of the OFTP2 server. An attacker can upload files to the server outside of the intended upload directory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<1.1 b43+ 1 more
- (no CPE)range: <1.1 b43
- cpe:2.3:a:mendelson:oftp2:*:*:*:*:*:*:*:*range: <1.1b43
- Mendelson/Mendelson OFTP2description
Patches
Vulnerability mechanics
References
2- insinuator.net/2022/03/a-tale-of-an-oftp2-vulnerability/nvdTechnical DescriptionThird Party Advisory
- mendelson-e-c.com/node/3355nvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.