High severity7.5NVD Advisory· Published Sep 19, 2022· Updated Jul 9, 2026

CVE-2022-37700

Description

Zentao Demo15 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: URL : view-source:https://demo15.zentao.pm/user-login.html/zentao/index.php?mode=getconfig.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Easycorp/Zentao
cpe:2.3:a:easycorp:zentao:15.0:-:*:*:*:*:*:*
Zentao/Zentao Demo15llm-fuzzy
Zentao/Zentaollm-fuzzy

Patches

Vulnerability mechanics

References

demo15.zentao.pm/user-login.html/zentao/index.phpnvdExploitThird Party Advisory
medium.com/%40sc0p3hacker/cve-2022-37700-directory-transversal-in-zentao-easy-soft-alm-2573c1f0fc21nvd
medium.com/@sc0p3hacker/cve-2022-37700-directory-transversal-in-zentao-easy-soft-alm-2573c1f0fc21nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000