CVE-2022-3939: Ferry Project Ferry

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability, which was classified as critical, has been found in lanyulei ferry. Affected by this issue is some unknown functionality of the file apis/public/file.go of the component API. The manipulation of the argument file leads to path traversal. The attack may be launched remotely. VDB-213446 is the identifier assigned to this vulnerability.

Affected products

• Ferry Project Ferry: affected versions not specified

Published 2022-11-11. Last modified 2026-06-17.