Every CVE Search/ Get API key

CVE-2003-1022

Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files...

7.5 HighFix available

Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory.

Exploit likelihood

1.88%Up 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory.

Record
CVE-2003-1022
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory.

Record
CVE-2003-1022
Updated
2026-11-02
EUVDEUVD-2003-1012 No score

Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory.

Record
EUVD-2003-1012
Updated
2026-11-03
GitHub AdvisoriesGHSA-wp7q-xf5f-gfc9 No score

Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files...

Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory.

Record
GHSA-wp7q-xf5f-gfc9
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
fsp
Debian:3.0
before 2.81.b3-3.1woody1
2.81.b3-3.1woody1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-1022 is a high vulnerability (CVSS 7.5) in Debian Fsp, published January 6, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.88%, the 79th percentile. Fixed in fsp 2.81.b3-3.1woody1.

References

MoveEnter Open