Onedev Project vulnerabilities
We track 1 vulnerability in Onedev Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 14, 2022.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Onedev Project vulnerabilities
- 8.8 High severity
Onedev: Improper Limitation of a Pathname to a Restricted Directory
Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib.