CVE-2022-4123: Fedoraproject Fedora

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality.

Affected products

• Fedoraproject Fedora: version 35 only; version 36 only; version 37 only
• Podman Project Podman: version 4.1.0 only; version 4.1.1 only; version 4.2.0 only; version 4.2.1 only; version 4.3.0 only

Published 2022-12-08. Last modified 2026-06-17.