CVE-2022-27772

spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking. This vulnerability impacted the org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.createTempDir method. NOTE: This vulnerability only affects products and/or versions that are no longer supported by the maintainer

• CWE-668

• https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-cm59-pr5q-cw85Exploit, Patch, Third Party Advisory
• https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-cm59-pr5q-cw85Exploit, Patch, Third Party Advisory

Published

Mar 30, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2772A vulnerability was found in SourceCodester Apartment Visito…9.8
• CVE-2022-2773A vulnerability was found in SourceCodester Apartment Visito…6.1
• CVE-2022-2774A vulnerability was found in SourceCodester Library Manageme…9.8
• CVE-2022-2775The Fast Flow WordPress plugin before 1.2.13 does not saniti…5.5
• CVE-2022-2776A vulnerability classified as problematic has been found in …5.3
• CVE-2022-2777Cross-site Scripting (XSS) - Stored in GitHub repository mic…5.4
• CVE-2022-27773A privilege escalation vulnerability is identified in Ivanti…9.8
• CVE-2022-27774An insufficiently protected credentials vulnerability exists…5.7
• CVE-2022-27775An information disclosure vulnerability exists in curl 7.65.…7.5
• CVE-2022-27776A insufficiently protected credentials vulnerability in fixe…6.5
• CVE-2022-27777A XSS Vulnerability in Action View tag helpers >= 5.2.0 and …6.1
• CVE-2022-27778A use of incorrectly resolved name vulnerability fixed in 7.…8.1