High severity8.8NVD Advisory· Published Sep 14, 2022· Updated Jun 17, 2026

CVE-2022-38301

Description

Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

onedev/onedevdescription
Theonedev/Onedevllm-fuzzy
Range: <7.4.14

Patches

Vulnerability mechanics

References

github.com/theonedev/onedev/commit/5b6a19c1f7fe9c271acc4268bcd261a9a1cbb3eanvdPatchThird Party Advisory
research.loginsoft.com/vulnerability/path-traversal-in-onedev-v7-4-14/nvdExploitPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000