Beveiligingsadvies

CVE-2022-24977

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-02-13 06:39:33

Laatst bijgewerkt 2024-08-03 04:29:01

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or imageName, leading to unsafe interaction with the CKEditor processImage.php script. The payload may be placed in PHP_SESSION_UPLOAD_PROGRESS when the PHP installation supports upload_progress.

← Alle CVE's bekijken Bekijk op cve.org ↗