CVE-2022-33085

Опубликовано: 30 июн. 2022

Источник: nvd

CVSS3: 7.2

CVSS2: 6.5

EPSS Низкий

Описание

ESPCMS P8 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the fetch_filename function at \espcms_public\espcms_templates\ESPCMS_Templates.

Ссылки

https://github.com/JeakinsCheung/ESPCMS-P8/blob/66fcc7f0fcc4d2325c0e31c9668f4c3362f0c06f/Arbitrary%20code%20execution%20vulnerability%20exists%20in%20ESPCMS%20management%20system.md
Exploit
Third Party Advisory
https://github.com/JeakinsCheung/ESPCMS-P8/blob/66fcc7f0fcc4d2325c0e31c9668f4c3362f0c06f/Arbitrary%20code%20execution%20vulnerability%20exists%20in%20ESPCMS%20management%20system.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ecisp:espcms-p8:-:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02516

Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-x3r9-qf42-4572