Packagist/ectouch/ectouch CVE-2022-25098: critical 9.1, EPSS 0.99%
Arbitrary file delete in ectouch/ectouch
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.7.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-ph62-8768-r87v
- https://nvd.nist.gov/vuln/detail/CVE-2022-25098
- https://github.com/dota-st/Vulnerability/blob/master/ECTouchV2.md
- https://github.com/ectouch/ectouch
CVE-2022-25098 · published · modified · JSON