---
id: CVE-2022-28945
title: >-
  An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory
  traversal via a crafted ZIP file.
summary: >-
  An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory
  traversal via a crafted ZIP file.
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-22
vendor: webbank
product: webcube
affected:
  - webcube = 3.2.2
published: '2022-06-02'
updated: '2026-07-05'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-28945'
references:
  - url: 'https://github.com/WeBankPartners/wecube-platform/issues/2324'
    label: cve@mitre.org
  - url: 'https://github.com/WeBankPartners/wecube-platform/releases/tag/v3.2.2'
    label: cve@mitre.org
  - url: 'http://webbank.com'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://wecube.com'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://github.com/WeBankPartners/wecube-platform/issues/2324'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://github.com/WeBankPartners/wecube-platform/releases/tag/v3.2.2'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.01726
epssPercentile: 0.76563
ingestedAt: '2026-07-06T14:44:24.224Z'
---

## Overview

An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted ZIP file.

## Affected

- `webcube = 3.2.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.