CVE-2008-2722: Menalto Gallery

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Menalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a ZIP archive.

Affected products

• Menalto Gallery: up to and including 2.2.4; version 2.1 only; version 2.1.1 only; version 2.1.2 only; version 2.2.0 only; version 2.2.1 only; …

Published 2008-06-16. Last modified 2026-06-16.