CVE-2022-41951

OroPlatform is a PHP Business Application Platform (BAP) designed to make development of custom business applications easier and faster. Path Traversal is possible in `Oro\Bundle\GaufretteBundle\FileManager::getTemporaryFileName`. With this method, an attacker can pass the path to a non-existent file, which will allow writing the content to a new file that will be available during script execution. This vulnerability has been fixed in version 5.0.9.

• CWE-22

• https://github.com/oroinc/platform/security/advisories/GHSA-9v3j-4j64-p937Patch, Vendor Advisory
• https://github.com/oroinc/platform/security/advisories/GHSA-9v3j-4j64-p937Patch, Vendor Advisory

Published

Nov 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-41946pgjdbc is an open source postgresql JDBC Driver. In affected…5.5
• CVE-2022-41947DHIS 2 is an open source information system for data capture…5.4
• CVE-2022-41948DHIS 2 is an open source information system for data capture…7.2
• CVE-2022-41949DHIS 2 is an open source information system for data capture…4.3
• CVE-2022-4195Insufficient policy enforcement in Safe Browsing in Google C…4.3
• CVE-2022-41950super-xray is the GUI alternative for vulnerability scanning…7.8
• CVE-2022-41952Synapse before 1.52.0 with URL preview functionality enabled…5.3
• CVE-2022-41953Git GUI is a convenient graphical tool that comes with Git f…7.8
• CVE-2022-41954MPXJ is an open source library to read and write project pla…3.3
• CVE-2022-41955Autolab is a course management service, initially developed …8.8
• CVE-2022-41956Autolab is a course management service, initially developed …6.5
• CVE-2022-41957Muhammara is a node module with c/cpp bindings to modify PDF…7.5