Medium severity4.7NVD Advisory· Published Dec 11, 2022· Updated Jun 17, 2026
CVE-2022-4402
CVE-2022-4402
Description
A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-215271.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:docsys_project:docsys:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:docsys_project:docsys:*:*:*:*:*:*:*:*range: <=2.02.37
- (no CPE)range: 2.02.37
- (no CPE)range: 2.02.37
Patches
Vulnerability mechanics
References
3- gitee.com/RainyGao/DocSys/issues/I65IYUnvdThird Party Advisory
- github.com/A-TGAO/MxsDocVul/blob/main/ZipSlipVul.mdnvdThird Party Advisory
- vuldb.comnvdThird Party Advisory
News mentions
0No linked articles in our index yet.