CVE-2022-3940

A vulnerability, which was classified as problematic, was found in lanyulei ferry. This affects an unknown part of the file apis/process/task.go. The manipulation of the argument file_name leads to path traversal. The associated identifier of this vulnerability is VDB-213447.

• CWE-22

• https://vuldb.com/?id.213447Third Party Advisory
• https://vuldb.com/?id.213447Third Party Advisory

Published

Nov 11, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-39394Wasmtime is a standalone runtime for WebAssembly. Prior to v…9.8
• CVE-2022-39395Vela is a Pipeline Automation (CI/CD) framework built on Lin…9.9
• CVE-2022-39396Parse Server is an open source backend that can be deployed …9.8
• CVE-2022-39397aliyun-oss-client is a rust client for Alibaba Cloud OSS. Us…4.3
• CVE-2022-39398tasklists is a tasklists plugin for GLPI (Kanban). Versions …6.1
• CVE-2022-39399Vulnerability in the Oracle Java SE, Oracle GraalVM Enterpri…3.7
• CVE-2022-39400Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
• CVE-2022-39401Vulnerability in the Oracle Solaris product of Oracle System…5.5
• CVE-2022-39402Vulnerability in the MySQL Shell product of Oracle MySQL (co…4.3
• CVE-2022-39403Vulnerability in the MySQL Shell product of Oracle MySQL (co…3.9
• CVE-2022-39404Vulnerability in the MySQL Installer product of Oracle MySQL…4.2
• CVE-2022-39405Vulnerability in the Oracle Access Manager product of Oracle…5.3