Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-bvd2-qk4w-bkda
Vulnerability ID VCID-bvd2-qk4w-bkda
Aliases CVE-2022-34026
GHSA-fvf5-xp83-vrqp
Summary ICEcoder vulnerable to Path Traversal ICEcoder v8.1 allows attackers to execute a directory traversal.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3.1 7.5 http://icecoder.com
generic_textual HIGH http://icecoder.com
ssvc Track http://icecoder.com
epss 0.01033 https://api.first.org/data/v1/epss?cve=CVE-2022-34026
epss 0.01033 https://api.first.org/data/v1/epss?cve=CVE-2022-34026
epss 0.01033 https://api.first.org/data/v1/epss?cve=CVE-2022-34026
epss 0.01033 https://api.first.org/data/v1/epss?cve=CVE-2022-34026
epss 0.01033 https://api.first.org/data/v1/epss?cve=CVE-2022-34026
epss 0.01033 https://api.first.org/data/v1/epss?cve=CVE-2022-34026
cvssv3.1 7.5 https://gist.github.com/enferas/85cdbadf5cba32ec7c8db6ea9e6833bf
generic_textual HIGH https://gist.github.com/enferas/85cdbadf5cba32ec7c8db6ea9e6833bf
ssvc Track https://gist.github.com/enferas/85cdbadf5cba32ec7c8db6ea9e6833bf
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-fvf5-xp83-vrqp
cvssv3.1 7.5 https://github.com/icecoder/ICEcoder
generic_textual HIGH https://github.com/icecoder/ICEcoder
ssvc Track https://github.com/icecoder/ICEcoder
cvssv3.1 7.5 https://github.com/icecoder/ICEcoder/blob/master/classes/Settings.php
generic_textual HIGH https://github.com/icecoder/ICEcoder/blob/master/classes/Settings.php
ssvc Track https://github.com/icecoder/ICEcoder/blob/master/classes/Settings.php
cvssv3.1 7.5 https://github.com/icecoder/ICEcoder/blob/master/lib/settings.php
generic_textual HIGH https://github.com/icecoder/ICEcoder/blob/master/lib/settings.php
ssvc Track https://github.com/icecoder/ICEcoder/blob/master/lib/settings.php
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2022-34026
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2022-34026
Reference id Reference type URL
http://icecoder.com
https://api.first.org/data/v1/epss?cve=CVE-2022-34026
https://gist.github.com/enferas/85cdbadf5cba32ec7c8db6ea9e6833bf
https://github.com/icecoder/ICEcoder
https://github.com/icecoder/ICEcoder/blob/master/classes/Settings.php
https://github.com/icecoder/ICEcoder/blob/master/lib/settings.php
https://nvd.nist.gov/vuln/detail/CVE-2022-34026
GHSA-fvf5-xp83-vrqp https://github.com/advisories/GHSA-fvf5-xp83-vrqp
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at http://icecoder.com
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-27T15:04:28Z/ Found at http://icecoder.com
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://gist.github.com/enferas/85cdbadf5cba32ec7c8db6ea9e6833bf
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-27T15:04:28Z/ Found at https://gist.github.com/enferas/85cdbadf5cba32ec7c8db6ea9e6833bf
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/icecoder/ICEcoder
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-27T15:04:28Z/ Found at https://github.com/icecoder/ICEcoder
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/icecoder/ICEcoder/blob/master/classes/Settings.php
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-27T15:04:28Z/ Found at https://github.com/icecoder/ICEcoder/blob/master/classes/Settings.php
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/icecoder/ICEcoder/blob/master/lib/settings.php
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-27T15:04:28Z/ Found at https://github.com/icecoder/ICEcoder/blob/master/lib/settings.php
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-34026
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.777
EPSS Score 0.01033
Published At June 4, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T17:46:07.776762+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/09/GHSA-fvf5-xp83-vrqp/GHSA-fvf5-xp83-vrqp.json 38.6.0