CVE-2022-38301: Onedev Project Onedev

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib.

Affected products

• Onedev Project Onedev: version 7.4.14 only

Published 2022-09-14. Last modified 2026-06-17.