What’s Vulnerable › Vulnerabilities

CVE-2022-37700

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-09-19 · updated 2026-07-09
• Weakness: CWE-22

Description

Zentao Demo15 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: URL : view-source:https://demo15.zentao.pm/user-login.html/zentao/index.php?mode=getconfig.

Affected products

• easysoft zentaopms: 15.0

References

• https://demo15.zentao.pm/user-login.html/zentao/index.php?mode=getconfig
• https://medium.com/@sc0p3hacker/cve-2022-37700-directory-transversal-in-zentao-easy-soft-alm-2573c1f0fc21
• https://demo15.zentao.pm/user-login.html/zentao/index.php?mode=getconfig
• https://medium.com/%40sc0p3hacker/cve-2022-37700-directory-transversal-in-zentao-easy-soft-alm-2573c1f0fc21

Get alerted when CVE-2022-37700 or the next vulnerability affects your stack