CVE-2022-0665

Path Traversal in GitHub repository pimcore/pimcore prior to 10.3.2.

• CWE-22

• https://github.com/pimcore/pimcore/commit/28945649a6234ccaa8c94c6cd83d1954603baf3ePatch, Third Party Advisory
• https://huntr.dev/bounties/423df64d-c591-4ad9-bf1c-411bcbc06ba3Exploit, Third Party Advisory
• https://github.com/pimcore/pimcore/commit/28945649a6234ccaa8c94c6cd83d1954603baf3ePatch, Third Party Advisory
• https://huntr.dev/bounties/423df64d-c591-4ad9-bf1c-411bcbc06ba3Exploit, Third Party Advisory

Published

Feb 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0659The Sync QCloud COS WordPress plugin before 2.0.1 does not e…4.8
• CVE-2022-0660Generation of Error Message Containing Sensitive Information…7.5
• CVE-2022-0661The Ad Injection WordPress plugin through 1.2.0.19 does not …7.2
• CVE-2022-0662The AdRotate WordPress plugin before 5.8.23 does not sanitis…4.8
• CVE-2022-0663The Print, PDF, Email by PrintFriendly WordPress plugin befo…4.8
• CVE-2022-0664Use of Hard-coded Cryptographic Key in Go github.com/gravitl…9.8
• CVE-2022-0666CRLF Injection leads to Stack Trace Exposure due to lack of …7.5
• CVE-2022-0667When the vulnerability is triggered the BIND process will ex…7.5
• CVE-2022-0668JFrog Artifactory prior to 7.37.13 is vulnerable to Authenti…9.8
• CVE-2022-0669A flaw was found in dpdk. This flaw allows a malicious vhost…6.5
• CVE-2022-0670A flaw was found in Openstack manilla owning a Ceph File sys…9.1
• CVE-2022-0671A flaw was found in vscode-xml in versions prior to 0.19.0. …9.1