VULNERABILITY INTELLIGENCE

CVE-2022-43451

CVSS score8.4 HIGH
EPSS probability0.20%
CISA KEVNot currently listed
Published2022-11-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

OpenHarmony-v3.1.2 and prior versions had an Multiple path traversal vulnerability in appspawn and nwebspawn services. Local attackers can create arbitrary directories or escape application sandbox.If chained with other vulnerabilities it would allow an unprivileged process to gain full root privileges.

Weakness classification

  • scy@openharmony.io: CWE-287
  • nvd@nist.gov: CWE-22

Primary references