Drive Composer
Approved changes feed: RSS · Atom
cpe:2.3:a:abb:drive_composer:*:*:*:*:pro:*:*:*
part: a version: * update: *
| Vendor | Abb (6be1db4f-4f59-5a03-a118-0ff43377170e) |
|---|---|
| Product | Drive Composer (b24da765-a796-5021-a68e-4b1974db1671) |
| Edition | * |
| Language | * |
| Software edition | pro |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-3573 |
vulnerable | 2026-06-08 05:48:21.453648 |
Details available
MEDIUM (5.4)
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. Due to the improper filtering of query parameters in the wiki changes page, an attacker can execute arbitrary JavaScript on the self-hosted instances running without strict CSP.
Published: 2023-01-12T00:00:00.000Z
Updated: 2025-04-08T15:15:38.863Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31219 |
vulnerable | 2026-06-08 05:43:40.454779 |
Drive Composer Link Following Local Privilege Escalation Vulnerability
HIGH (7.3)
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation on the product.
Published: 2022-06-15T18:48:43.674Z
Updated: 2025-04-23T18:14:23.909Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31218 |
vulnerable | 2026-06-08 05:43:40.453758 |
Drive Composer Link Following Local Privilege Escalation Vulnerability
HIGH (7.8)
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation on the product.
Published: 2022-06-15T18:48:17.775Z
Updated: 2025-04-23T18:14:29.872Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31217 |
vulnerable | 2026-06-08 05:43:40.452740 |
Drive Composer Link Following Local Privilege Escalation Vulnerability
HIGH (7.8)
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation on the product.
Published: 2022-06-15T18:47:49.978Z
Updated: 2025-04-23T18:14:35.662Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31216 |
vulnerable | 2026-06-08 05:43:40.451542 |
Drive Composer Link Following Local Privilege Escalation Vulnerability
HIGH (7.8)
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation on the product.
Published: 2022-06-15T18:47:24.977Z
Updated: 2024-09-16T18:29:18.649Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.