https://vulnerability.circl.lu/sightings/feed 2026-06-14T12:19:39.063164+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/41211b51-2423-430e-aa32-7e7b5df3feb0/export 2026-06-14T12:19:39.549362+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "41211b51-2423-430e-aa32-7e7b5df3feb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46898", "type": "seen", "source": "https://t.me/cibsecurity/67254", "content": "\u203c CVE-2022-46898 \u203c\n\nAn issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal via the \"restore SQL data\" filename. The Vocera Report Console contains a websocket function that allows for the restoration of the database from a ZIP archive that expects a SQL import file. The filename provided is not properly sanitized and allows for the inclusion of a path-traversal payload that can be used to escape the intended Vocera restoration directory. An attacker could exploit this vulnerability to point to a crafted ZIP archive that contains SQL commands that could be executed against the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-26T00:27:06.000000Z"} 2023-07-26T00:27:06+00:00