Medium severity5.5NVD Advisory· Published Jan 6, 2023· Updated Jun 17, 2026

CVE-2022-4878

Description

A vulnerability classified as critical has been found in JATOS. Affected is the function ZipUtil of the file modules/common/app/utils/common/ZipUtil.java of the component ZIP Handler. The manipulation leads to path traversal. Upgrading to version 3.7.5-alpha is able to address this issue. The name of the patch is 2b42519f309d8164e8811392770ce604cdabb5da. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217548.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

JATOS/Jatos3 versions
cpe:2.3:a:jatos:jatos:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:jatos:jatos:*:*:*:*:*:*:*:*range: <=3.7.5
- (no CPE)
- (no CPE)range: up to 3.7.5-alpha

Patches

Vulnerability mechanics

References

github.com/JATOS/JATOS/commit/2b42519f309d8164e8811392770ce604cdabb5danvdPatchThird Party Advisory
github.com/JATOS/JATOS/releases/tag/v3.7.5-alphanvdRelease NotesThird Party Advisory
vuldb.comnvdThird Party Advisory
vuldb.comnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000