CVE-2022-22790

SYNEL - eharmony Directory Traversal. Directory Traversal - is an attack against a server or a Web application aimed at unauthorized access to the file system. on the "Name" parameter the attacker can return to the root directory and open the host file. The path exposes sensitive files that users upload

• CWE-22

• https://www.gov.il/en/departments/faq/cve_advisoriesThird Party Advisory, VDB Entry
• https://www.gov.il/en/departments/faq/cve_advisoriesThird Party Advisory, VDB Entry

Published

Jan 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22785The Zoom Client for Meetings (for Android, iOS, Linux, MacOS…9.1
• CVE-2022-22786The Zoom Client for Meetings for Windows before version 5.10…8.8
• CVE-2022-22787The Zoom Client for Meetings (for Android, iOS, Linux, macOS…7.5
• CVE-2022-22788The Zoom Opener installer is downloaded by a user from the L…7.8
• CVE-2022-22789Charactell - FormStorm Enterprise Account takeover – An atta…7.8
• CVE-2022-2279NULL Pointer Dereference in GitHub repository bfabiszewski/l…5.5
• CVE-2022-22791SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS…5.4
• CVE-2022-22792MobiSoft - MobiPlus User Take Over and Improper Handling of …7.5
• CVE-2022-22793Cybonet - PineApp Mail Relay Local File Inclusion. Attacker …7.5
• CVE-2022-22794Cybonet - PineApp Mail Relay Unauthenticated Sql Injection. …9.8
• CVE-2022-22795Signiant - Manager+Agents XML External Entity (XXE) - Extrac…9.1
• CVE-2022-22796Sysaid – Sysaid System Takeover - An attacker can bypass the…9.8