CVE-2022-4402

A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-215271.

• CWE-22
• CWE-22

• https://gitee.com/RainyGao/DocSys/issues/I65IYUThird Party Advisory
• https://github.com/A-TGAO/MxsDocVul/blob/main/ZipSlipVul.mdThird Party Advisory
• https://vuldb.com/?id.215271Third Party Advisory
• https://gitee.com/RainyGao/DocSys/issues/I65IYUThird Party Advisory
• https://github.com/A-TGAO/MxsDocVul/blob/main/ZipSlipVul.mdThird Party Advisory
• https://vuldb.com/?id.215271Third Party Advisory

Published

Dec 11, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-44014An issue was discovered in Simmeth Lieferantenmanager before…6.5
• CVE-2022-44015An issue was discovered in Simmeth Lieferantenmanager before…9.8
• CVE-2022-44016An issue was discovered in Simmeth Lieferantenmanager before…7.5
• CVE-2022-44017An issue was discovered in Simmeth Lieferantenmanager before…7.5
• CVE-2022-44018In Softing uaToolkit Embedded before 1.40.1, a malformed Pub…7.5
• CVE-2022-44019In Total.js 4 before 0e5ace7, /api/common/ping can achieve r…8.8
• CVE-2022-44020An issue was discovered in OpenStack Sushy-Tools through 0.2…5.5
• CVE-2022-44022PwnDoc through 0.5.3 might allow remote attackers to identif…5.3
• CVE-2022-44023PwnDoc through 0.5.3 might allow remote attackers to identif…5.3
• CVE-2022-44024An issue was discovered in NetScout nGeniusONE 6.3.2 before …6.1
• CVE-2022-44025An issue was discovered in NetScout nGeniusONE 6.3.2 before …6.1
• CVE-2022-44026An issue was discovered in NetScout nGeniusONE 6.3.2 before …6.1