CVE-2022-45866: Fedoraproject Fedora

Medium severity, CVSS 5.3. EPSS: 1.4% chance of exploitation in the next 30 days.

qpress before PierreLvx/qpress 20220819 and before version 11.3, as used in Percona XtraBackup and other products, allows directory traversal via ../ in a .qp file.

Affected products

• Fedoraproject Fedora: version 35 only; version 36 only; version 37 only
• Qpress Project Qpress: before 11.3 (fixed in 11.3)

Published 2022-11-23. Last modified 2026-06-17.