What’s Vulnerable › Vulnerabilities

CVE-2022-45473

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-11-18 · updated 2026-06-17

Description

In drachtio-server 0.8.18, /var/log/drachtio has mode 0777 and drachtio.log has mode 0666.

Affected products

• Drachtio-Server: 0.8.18

References

• https://github.com/drachtio/drachtio-server/commit/f791a9313c58a911ce09f465f4bba594243b29ec
• https://github.com/drachtio/drachtio-server/issues/241
• https://github.com/drachtio/drachtio-server/commit/f791a9313c58a911ce09f465f4bba594243b29ec
• https://github.com/drachtio/drachtio-server/issues/241

Get alerted when CVE-2022-45473 or the next vulnerability affects your stack