CVE-2022-41951 | oroinc OroPlatform up to 4.1.13/4.2.10/5.0.8 getTemporaryFileName path traversal (GHSA-9v3j-4j64-p937)

A vulnerability has been found in oroinc OroPlatform up to 4.1.13/4.2.10/5.0.8 and classified as critical. Affected by this vulnerability is the function FileManager::getTemporaryFileName. The manipulation leads to path traversal.

This vulnerability is known as CVE-2022-41951. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.