CVE-2022-3939

A vulnerability, which was classified as critical, has been found in lanyulei ferry. Affected by this issue is some unknown functionality of the file apis/public/file.go of the component API. The manipulation of the argument file leads to path traversal. The attack may be launched remotely. VDB-213446 is the identifier assigned to this vulnerability.

• CWE-22

• https://vuldb.com/?id.213446Third Party Advisory
• https://vuldb.com/?id.213446Third Party Advisory

Published

Nov 11, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-39384OpenZeppelin Contracts is a library for secure smart contrac…5.6
• CVE-2022-39385Discourse is the an open source discussion platform. In some…6.5
• CVE-2022-39386@fastify/websocket provides WebSocket support for Fastify. A…7.5
• CVE-2022-39387XWiki OIDC has various tools to manipulate OpenID Connect pr…7.5
• CVE-2022-39388Istio is an open platform to connect, manage, and secure mic…3.5
• CVE-2022-39389Lightning Network Daemon (lnd) is an implementation of a lig…6.5
• CVE-2022-39390Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-39392Wasmtime is a standalone runtime for WebAssembly. Prior to v…7.4
• CVE-2022-39393Wasmtime is a standalone runtime for WebAssembly. Prior to v…8.6
• CVE-2022-39394Wasmtime is a standalone runtime for WebAssembly. Prior to v…9.8
• CVE-2022-39395Vela is a Pipeline Automation (CI/CD) framework built on Lin…9.9
• CVE-2022-39396Parse Server is an open source backend that can be deployed …9.8