p PatchFirst

CVE-2022-22821

CVE-2022-22821

This page contains facts from public vulnerability sources. Check the original advisory before updating.

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available.

CVSS 2.0 · Low · EPSS 0.3% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • nemo-toolkit PyPI

    Versions
    • 0.10.0
    • 0.10.0b0
    • 0.10.0b1
    • 0.10.0b10
    • 0.10.0b2
    • 0.10.0b3
    • 0.10.0b4
    • 0.10.0b5
    • 0.10.0b6
    • 0.10.0b7
    • 0.10.0b8
    • 0.10.0b9
    • 0.10.1
    • 0.11.0
    • 0.11.0b1
    • 0.11.0b10
    • 0.11.0b11
    • 0.11.0b12
    • 0.11.0b14
    • 0.11.0b2
    • 0.11.0b3
    • 0.11.0b4
    • 0.11.0b5
    • 0.11.0b6
    • 0.11.0b8
    • 0.8
    • 0.8.1
    • 0.8.2
    • 0.9.0
    • 1.0.0
    • 1.0.0a4
    • 1.0.0b0
    • 1.0.0b1
    • 1.0.0b2
    • 1.0.0b3
    • 1.0.0rc1
    • 1.0.1
    • 1.0.2
    • 1.1.0
    • 1.2.0
    • 1.3.0
    • 1.4.0
    • 1.5.0
    • 1.5.1
    Affected ranges
    • ECOSYSTEM: < 1.6.0

    Update to 1.6.0

Original sources

Check your server →