CVE-2022-28380

HIGH · CVSS 7.5 EPSS 1.51%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-04-03 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. See the original NVD description below for full technical details.

CVE

CVE-2022-28380

Severity

HIGH

CVSS

7.5

EPSS

1.51%

The rc-httpd component through 2022-03-31 for 9front (Plan 9 fork) allows ..%2f directory traversal if serve-static is used.