CVE-2022-42725
Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by...
Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by symbolic directory links.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by symbolic directory links.
- Record
CVE-2022-42725- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by symbolic directory links.
- Record
CVE-2022-42725- Updated
- 2026-11-02
EUVDEUVD-2022-45791 No score
Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by symbolic directory links.
- Record
EUVD-2022-45791- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-27gf-j34q-jwv5
Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by...
Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by symbolic directory links.
- Record
GHSA-27gf-j34q-jwv5- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by symbolic directory links.
- Record
CVE-2022-42725- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12898-1 No score
nemo-extension-warpinator-1.6.1-1.1 on GA media
These are all security issues fixed in the nemo-extension-warpinator-1.6.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12898-1- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-42725 is a high vulnerability (CVSS 7.5) in Linuxmint Warpinator, published October 10, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.70%, the 77th percentile. No source names a fixed version.
References
github.com/linuxmint/warpinator/commit/5244c33d4c109ede9607b9d94461650410e2cddc
openwall.com/lists/oss-security/2022/10/24/1