CVE-2022-4065 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-4065 Interim 1 26 2026-03-05T04:51:22Z current 2022-11-23T00:46:45Z 2026-03-05T04:51:22Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-4065 A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML File Parser. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version 7.5.1 and 7.7.1 is able to address this issue. The patch is named 9150736cd2c123a6a3b60e6193630859f9f0422b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-214027. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2023-March/028497.html E-Mail link for SUSE-SU-2023:1690-1 https://lists.suse.com/pipermail/sle-security-updates/2024-July/019004.html E-Mail link for SUSE-SU-2024:2568-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container containers/apache-pulsar:3.3.2-2.3 Container suse/manager/5.0/x86_64/server:5.0.1.7.5.1 Container suse/multi-linux-manager/5.1/x86_64/server:5.1.0.6.40 Image SLES15-SP4-Manager-Server-4-3 Image SLES15-SP4-Manager-Server-4-3-Azure-llc Image SLES15-SP4-Manager-Server-4-3-Azure-ltd Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3-EC2-llc Image SLES15-SP4-Manager-Server-4-3-EC2-ltd Image server-image SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Manager Server Module 4.3 openSUSE Leap 15.4 openSUSE Leap 15.5 openSUSE Leap 15.6 openSUSE Tumbleweed mockito-5.11.0-150200.3.7.1 mockito-javadoc-5.11.0-150200.3.7.1 snakeyaml-2.2-150200.3.15.1 snakeyaml-javadoc-2.2-150200.3.15.1 testng-7.10.1-150200.3.10.1 testng-7.10.2-160000.2.2 testng-7.4.0-150200.3.7.1 testng-7.4.0-3.1 testng-javadoc-7.10.1-150200.3.10.1 testng-javadoc-7.10.2-160000.2.2 testng-javadoc-7.4.0-150200.3.7.1 testng-javadoc-7.4.0-3.1 snakeyaml-2.2-150200.3.15.1 as a component of Container containers/apache-pulsar:3.3.2-2.3 testng-7.4.0-150200.3.7.1 as a component of Container containers/apache-pulsar:3.3.2-2.3 snakeyaml-2.2-150200.3.15.1 as a component of Container suse/manager/5.0/x86_64/server:5.0.1.7.5.1 snakeyaml-2.2-150200.3.15.1 as a component of Container suse/multi-linux-manager/5.1/x86_64/server:5.1.0.6.40 snakeyaml-2.2-150200.3.15.1 as a component of Image SLES15-SP4-Manager-Server-4-3 snakeyaml-2.2-150200.3.15.1 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-llc snakeyaml-2.2-150200.3.15.1 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-ltd snakeyaml-2.2-150200.3.15.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS snakeyaml-2.2-150200.3.15.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure snakeyaml-2.2-150200.3.15.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 snakeyaml-2.2-150200.3.15.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE snakeyaml-2.2-150200.3.15.1 as a component of Image SLES15-SP4-Manager-Server-4-3-EC2-llc snakeyaml-2.2-150200.3.15.1 as a component of Image SLES15-SP4-Manager-Server-4-3-EC2-ltd snakeyaml-2.2-150200.3.15.1 as a component of Image server-image testng-7.4.0-150200.3.7.1 as a component of SUSE Enterprise Storage 7 snakeyaml-2.2-150200.3.15.1 as a component of SUSE Enterprise Storage 7.1 testng-7.10.1-150200.3.10.1 as a component of SUSE Enterprise Storage 7.1 snakeyaml-2.2-150200.3.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS testng-7.10.1-150200.3.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS testng-7.4.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS snakeyaml-2.2-150200.3.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS testng-7.10.1-150200.3.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS snakeyaml-2.2-150200.3.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS testng-7.10.1-150200.3.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS snakeyaml-2.2-150200.3.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS testng-7.10.1-150200.3.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS testng-7.4.0-150200.3.7.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 snakeyaml-2.2-150200.3.15.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 testng-7.4.0-150200.3.7.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 snakeyaml-2.2-150200.3.15.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 testng-7.4.0-150200.3.7.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 snakeyaml-2.2-150200.3.15.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 testng-7.4.0-150200.3.7.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 mockito-5.11.0-150200.3.7.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 mockito-5.11.0-150200.3.7.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 testng-7.4.0-150200.3.7.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 snakeyaml-2.2-150200.3.15.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS testng-7.10.1-150200.3.10.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS snakeyaml-2.2-150200.3.15.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS testng-7.10.1-150200.3.10.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS snakeyaml-2.2-150200.3.15.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS testng-7.10.1-150200.3.10.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS snakeyaml-2.2-150200.3.15.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA testng-7.10.1-150200.3.10.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA testng-7.10.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 testng-javadoc-7.10.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 snakeyaml-2.2-150200.3.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 testng-7.10.1-150200.3.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 snakeyaml-2.2-150200.3.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 testng-7.10.1-150200.3.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 snakeyaml-2.2-150200.3.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 testng-7.10.1-150200.3.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 snakeyaml-2.2-150200.3.15.1 as a component of SUSE Manager Server Module 4.3 testng-7.4.0-150200.3.7.1 as a component of openSUSE Leap 15.4 testng-javadoc-7.4.0-150200.3.7.1 as a component of openSUSE Leap 15.4 mockito-5.11.0-150200.3.7.1 as a component of openSUSE Leap 15.5 mockito-javadoc-5.11.0-150200.3.7.1 as a component of openSUSE Leap 15.5 snakeyaml-2.2-150200.3.15.1 as a component of openSUSE Leap 15.5 snakeyaml-javadoc-2.2-150200.3.15.1 as a component of openSUSE Leap 15.5 testng-7.10.1-150200.3.10.1 as a component of openSUSE Leap 15.5 testng-javadoc-7.10.1-150200.3.10.1 as a component of openSUSE Leap 15.5 mockito-5.11.0-150200.3.7.1 as a component of openSUSE Leap 15.6 mockito-javadoc-5.11.0-150200.3.7.1 as a component of openSUSE Leap 15.6 snakeyaml-2.2-150200.3.15.1 as a component of openSUSE Leap 15.6 snakeyaml-javadoc-2.2-150200.3.15.1 as a component of openSUSE Leap 15.6 testng-7.10.1-150200.3.10.1 as a component of openSUSE Leap 15.6 testng-javadoc-7.10.1-150200.3.10.1 as a component of openSUSE Leap 15.6 testng-7.4.0-3.1 as a component of openSUSE Tumbleweed testng-javadoc-7.4.0-3.1 as a component of openSUSE Tumbleweed A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML File Parser. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version 7.5.1 and 7.7.1 is able to address this issue. The patch is named 9150736cd2c123a6a3b60e6193630859f9f0422b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-214027. CVE-2022-4065 Container containers/apache-pulsar:3.3.2-2.3:snakeyaml-2.2-150200.3.15.1 Container containers/apache-pulsar:3.3.2-2.3:testng-7.4.0-150200.3.7.1 Container suse/manager/5.0/x86_64/server:5.0.1.7.5.1:snakeyaml-2.2-150200.3.15.1 Container suse/multi-linux-manager/5.1/x86_64/server:5.1.0.6.40:snakeyaml-2.2-150200.3.15.1 Image SLES15-SP4-Manager-Server-4-3:snakeyaml-2.2-150200.3.15.1 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:snakeyaml-2.2-150200.3.15.1 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:snakeyaml-2.2-150200.3.15.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:snakeyaml-2.2-150200.3.15.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:snakeyaml-2.2-150200.3.15.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:snakeyaml-2.2-150200.3.15.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:snakeyaml-2.2-150200.3.15.1 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:snakeyaml-2.2-150200.3.15.1 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:snakeyaml-2.2-150200.3.15.1 Image server-image:snakeyaml-2.2-150200.3.15.1 SUSE Enterprise Storage 7:testng-7.4.0-150200.3.7.1 SUSE Enterprise Storage 7.1:snakeyaml-2.2-150200.3.15.1 SUSE Enterprise Storage 7.1:testng-7.10.1-150200.3.10.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:snakeyaml-2.2-150200.3.15.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:testng-7.10.1-150200.3.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:testng-7.4.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:snakeyaml-2.2-150200.3.15.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:testng-7.10.1-150200.3.10.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:snakeyaml-2.2-150200.3.15.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:testng-7.10.1-150200.3.10.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:snakeyaml-2.2-150200.3.15.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:testng-7.10.1-150200.3.10.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:testng-7.4.0-150200.3.7.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:snakeyaml-2.2-150200.3.15.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:testng-7.4.0-150200.3.7.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:snakeyaml-2.2-150200.3.15.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:testng-7.4.0-150200.3.7.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:snakeyaml-2.2-150200.3.15.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:testng-7.4.0-150200.3.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:testng-javadoc-7.4.0-150200.3.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:testng-javadoc-7.4.0-150200.3.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:mockito-5.11.0-150200.3.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:mockito-javadoc-5.11.0-150200.3.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:mockito-junit-jupiter-5.11.0-150200.3.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:snakeyaml-javadoc-2.2-150200.3.15.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:testng-javadoc-7.4.0-150200.3.7.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:mockito-5.11.0-150200.3.7.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:mockito-5.11.0-150200.3.7.1 SUSE Linux Enterprise Real Time 15 SP3:testng-7.4.0-150200.3.7.1 SUSE Linux Enterprise Server 15 SP2-LTSS:snakeyaml-2.2-150200.3.15.1 SUSE Linux Enterprise Server 15 SP2-LTSS:testng-7.10.1-150200.3.10.1 SUSE Linux Enterprise Server 15 SP3-LTSS:snakeyaml-2.2-150200.3.15.1 SUSE Linux Enterprise Server 15 SP3-LTSS:testng-7.10.1-150200.3.10.1 SUSE Linux Enterprise Server 15 SP4-LTSS:snakeyaml-2.2-150200.3.15.1 SUSE Linux Enterprise Server 15 SP4-LTSS:testng-7.10.1-150200.3.10.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:snakeyaml-2.2-150200.3.15.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:testng-7.10.1-150200.3.10.1 SUSE Linux Enterprise Server 16.0:testng-7.10.2-160000.2.2 SUSE Linux Enterprise Server 16.0:testng-javadoc-7.10.2-160000.2.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:snakeyaml-2.2-150200.3.15.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:testng-7.10.1-150200.3.10.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:snakeyaml-2.2-150200.3.15.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:testng-7.10.1-150200.3.10.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:snakeyaml-2.2-150200.3.15.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:testng-7.10.1-150200.3.10.1 SUSE Manager Server Module 4.3:snakeyaml-2.2-150200.3.15.1 openSUSE Leap 15.4:testng-7.4.0-150200.3.7.1 openSUSE Leap 15.4:testng-javadoc-7.4.0-150200.3.7.1 openSUSE Leap 15.5:mockito-5.11.0-150200.3.7.1 openSUSE Leap 15.5:mockito-javadoc-5.11.0-150200.3.7.1 openSUSE Leap 15.5:snakeyaml-2.2-150200.3.15.1 openSUSE Leap 15.5:snakeyaml-javadoc-2.2-150200.3.15.1 openSUSE Leap 15.5:testng-7.10.1-150200.3.10.1 openSUSE Leap 15.5:testng-javadoc-7.10.1-150200.3.10.1 openSUSE Leap 15.6:mockito-5.11.0-150200.3.7.1 openSUSE Leap 15.6:mockito-javadoc-5.11.0-150200.3.7.1 openSUSE Leap 15.6:snakeyaml-2.2-150200.3.15.1 openSUSE Leap 15.6:snakeyaml-javadoc-2.2-150200.3.15.1 openSUSE Leap 15.6:testng-7.10.1-150200.3.10.1 openSUSE Leap 15.6:testng-javadoc-7.10.1-150200.3.10.1 openSUSE Tumbleweed:testng-7.4.0-3.1 openSUSE Tumbleweed:testng-javadoc-7.4.0-3.1 important 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H