CVE-2022-27498

A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.

• CWE-22

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1531Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1531Third Party Advisory

Published

Dec 15, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27492An integer underflow in WhatsApp could have caused remote co…7.8
• CVE-2022-27493Improper initialization in the firmware for some Intel(R) NU…7.8
• CVE-2022-27494Aethon TUG Home Base Server versions prior to version 24 are…5.4
• CVE-2022-27495On all versions 1.3.x (fixed in 1.4.0) NGINX Service Mesh co…6.5
• CVE-2022-27496Cross-site scripting vulnerability in Zero-channel BBS Plus …6.1
• CVE-2022-27497Null pointer dereference in firmware for Intel(R) AMT before…7.5
• CVE-2022-27499Premature release of resource during expected lifetime in th…4.4
• CVE-2022-2750A vulnerability, which was classified as critical, was found…9.8
• CVE-2022-27500Incorrect default permissions for the Intel(R) Support Andro…5.5
• CVE-2022-27502RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows lo…7.8
• CVE-2022-27503Cross-site Scripting (XSS) vulnerability in Citrix StoreFron…6.1
• CVE-2022-27505Reflected cross site scripting (XSS)6.1