What’s Vulnerable › Vulnerabilities

CVE-2022-25010

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-01 · updated 2026-06-17
• Weakness: CWE-732

Description

The component /rootfs in RageFile of Stepmania v5.1b2 and below allows attackers access to the entire file system.

Affected products

• Stepmania: through 5.0.12; 5.1.0-alpha, 5.1.0-alpha2, 5.1.0-alpha3, 5.1.0-beta1, 5.1.0-beta2

References

• https://github.com/stepmania/stepmania/pull/2184
• https://github.com/stepmania/stepmania/pull/2184

Get alerted when CVE-2022-25010 or the next vulnerability affects your stack