Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-33vr-hv7f-mv36

Опубликовано: 11 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 3.8

Описание

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file.

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file.

EPSS

Процентиль: 22%
0.00074
Низкий

3.8 Low

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 3.8
nvd
26 дней назад

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file.

EPSS

Процентиль: 22%
0.00074
Низкий

3.8 Low

CVSS3

Дефекты

CWE-434