CVE-2022-4123 - AskarLabs CVE Database

CVE-2022-4123

Vendor N/A

Product podman

Weakness CWE-23

Published December 8, 2022

Last update April 22, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality.

Key dates

02Disclosure timeline

December 8, 2022 CVE published

April 22, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-4123 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/23.html

Related vulnerabilities

04Related CVE

CVE-2022-23732 Path traversal in GitHub Enterprise Server management console leading to a bypass of CSRF protections CVE-2026-21659 Johnson Controls -Frick Quantum HD-Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion CVE-2026-41551 CVE-2022-23854 CVE-2018-5448 Medtronic 2090 Carelink Programmer Relative Path Traversal