CVE-2022-28451 - nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature

HIGH

nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature

Published May 1, 2022

7.5

HIGH

CVSS 3.1

EPSS 1.57%

nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature.

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

Link	Providers	Tags
https://github.com/nopSolutions/nopCommerce/commit/47ff9a241243db9359f10216bcf401baaa36d0b4		x_refsource_MISCPatchThird Party Advisory
https://github.com/nopSolutions/nopCommerce/issues/6203		x_refsource_MISCIssue TrackingThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published May 1, 2022

Updated Aug 3, 2024

Reserved Apr 4, 2022

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a