CVE-2022-37866

When Apache Ivy downloads artifacts from a repository it stores them in the local file system based on a user-supplied "pattern" that may include placeholders for artifacts coordinates like the organisation, module or version. If said coordinates contain "../" sequences - which are valid characters for Ivy coordinates in general - it is possible the artifacts are stored outside of Ivy's local cache or repository or can overwrite different artifacts inside of the local cache. In order to exploit this vulnerability an attacker needs collaboration by the remote repository as Ivy will issue http requests containing ".." sequences and a "normal" repository will not interpret them as part of the artifact coordinates. Users of Apache Ivy 2.0.0 to 2.5.1 should upgrade to Ivy 2.5.1.

• CWE-22

• https://lists.apache.org/thread/htxbr8oc464hxrgroftnz3my70whk93bMailing List, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YDIFDL5WSBEKBUVKTABUFDDD25SBNJLS/
• https://lists.apache.org/thread/htxbr8oc464hxrgroftnz3my70whk93bMailing List, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YDIFDL5WSBEKBUVKTABUFDDD25SBNJLS/

Published

Nov 7, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-37857bilde2910 Hauk v1.6.1 requires a hardcoded password which by…7.5
• CVE-2022-3786A buffer overrun can be triggered in X.509 certificate verif…7.5
• CVE-2022-37860The web configuration interface of the TP-Link M7350 V3 with…9.8
• CVE-2022-37861There is a remote code execution (RCE) vulnerability in Tenh…9.8
• CVE-2022-37864A vulnerability has been identified in Solid Edge (All Versi…7.8
• CVE-2022-37865With Apache Ivy 2.4.0 an optional packaging attribute has be…9.1
• CVE-2022-3787A vulnerability was found in the device-mapper-multipath. Th…7.8
• CVE-2022-37877A vulnerability in the ClearPass OnGuard macOS agent could a…7.8
• CVE-2022-37878Vulnerabilities in the ClearPass Policy Manager web-based ma…7.2
• CVE-2022-37879Vulnerabilities in the ClearPass Policy Manager web-based ma…7.2
• CVE-2022-3788Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-37880Vulnerabilities in the ClearPass Policy Manager web-based ma…7.2