Skip to main content

Use of Incorrectly-Resolved Name or Reference

CVE-2022-27778

High
8.1/10

Summary

A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • REQUIRED
  • NONE
  • NONE
  • HIGH

CWE-706 - Use of Incorrectly-Resolved Name or Reference

The software uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.

References

Advisory Timeline

  • Published