CVE-2022-23048

Опубликовано: 09 фев. 2022

Источник: nvd

CVSS3: 7.2

CVSS2: 6.5

EPSS Низкий

Описание

Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious extension in the format of a ZIP file with a PHP file inside it. After upload it, the PHP file will be placed at "themes/simpletheme/{rce}.php" from where can be accessed in order to execute commands.

Ссылки

https://exponentcms.lighthouseapp.com/projects/61783/tickets/1460
Exploit
Issue Tracking
Vendor Advisory
https://fluidattacks.com/advisories/dylan/
Exploit
Issue Tracking
Third Party Advisory
https://github.com/exponentcms/exponent-cms/issues/1546
Exploit
Issue Tracking
Third Party Advisory
https://exponentcms.lighthouseapp.com/projects/61783/tickets/1460
Exploit
Issue Tracking
Vendor Advisory
https://fluidattacks.com/advisories/dylan/
Exploit
Issue Tracking
Third Party Advisory
https://github.com/exponentcms/exponent-cms/issues/1546
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:exponentcms:exponent_cms:2.6.0:patch2:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04582

Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-5r4j-gp4j-q9p2

github

почти 4 года назад