Beveiligingsadvies

CVE-2022-34965

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-07-25 00:00:00
Laatst bijgewerkt 2024-08-03 09:22:10
Toegewezen door mitre
CVSS-score 7.2
Status PUBLISHED

Beschrijving

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability via the component /ossn/administrator/com_installer. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Note: The project owner believes this is intended behavior of the application as it only allows authenticated admins to upload files.