Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-4778

path traversal in elvexys StreamX using StreamView HTML component with public web server feature

Description

StreamX applications from versions 6.02.01 to 6.04.34 are affected by a path traversal vulnerability that allows authenticated users to get unauthorized access to files on the server's filesystem. StreamX applications using StreamView HTML component with the public web server feature activated are affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

elvexys StreamX

Default version status: unaffected

  • 6.02.01 to ≤ 6.04.34affected

References