BigAnt Software BigAnt Server - Path Traversal (CVE-2022-23347)

CVE-2022-23347 is a vulnerability in BigAnt Server that exposes systems to directory traversal attacks, allowing remote attackers to access files outside the intended directory structure.

CrowdSec has been tracking this vulnerability and its exploits since 30th of April 2025.

According to CrowdSec data, while opportunistic exploitation dominates, a portion of threat actors trying to exploit CVE-2022-23347 apply basic targeting methods such as port or service detection. This indicates emerging patterns of selective targeting. Additionally, according to week-over-week analysis by CrowdSec, exploitation of CVE-2022-23347 is surging. Attack volumes are spiking well above historical norms, indicating widespread and escalating interest from threat actors. CVE-2022-23347 is currently experiencing high visibility and active exploitation across the internet.

Observed exploitation attempts typically involve URLs containing /index.php/pan/shareurl/downloadsharedfile where attackers try to traverse directories using crafted parameters.