CVE-2022-47747

kraken <= 0.1.4 has an arbitrary file read vulnerability via the component testfs.

• CWE-22
• CWE-22

• https://github.com/uber/kraken/issues/333Exploit, Issue Tracking, Third Party Advisory
• https://github.com/uber/kraken/issues/333Exploit, Issue Tracking, Third Party Advisory

Published

Jan 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-4772A vulnerability was found in Widoco and classified as critic…7.8
• CVE-2022-4773** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified a…3.3
• CVE-2022-47732In Yeastar N412 and N824 Configuration Panel 42.x and 45.x, …7.5
• CVE-2022-4774The Bit Form WordPress plugin before 1.9 does not validate t…9.8
• CVE-2022-47740Seltmann GmbH Content Management System 6 is vulnerable to S…9.8
• CVE-2022-47745ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. Af…8.8
• CVE-2022-4775The GeoDirectory WordPress plugin before 2.2.22 does not val…5.4
• CVE-2022-47757In imo.im 2022.11.1051, a path traversal vulnerability deliv…9.8
• CVE-2022-47758Nanoleaf firmware v7.1.1 and below is missing TLS verificati…9.8
• CVE-2022-4776The CC Child Pages WordPress plugin before 1.43 does not val…5.4
• CVE-2022-47762In gin-vue-admin < 2.5.5, the download module has a Path Tra…7.5
• CVE-2022-47766PopojiCMS v2.0.1 backend plugin function has a file upload v…8.8