CVE-2022-46959: Sonic Project Sonic

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal.

Affected products

• Sonic Project Sonic: version 1.0.4 only

Published 2023-01-23. Last modified 2026-06-17.