Beveiligingsadvies

CVE-2022-42925

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-10-31 19:58:45

Laatst bijgewerkt 2025-05-06 19:44:17

Toegewezen door INCIBE

CVSS-score 9.9

Status PUBLISHED

Beschrijving

There is a vulnerability on Forma LMS version 3.1.0 and earlier that could allow an authenticated attacker (with the role of student) to privilege escalate in order to upload a Zip file through the plugin upload component. The exploitation of this vulnerability could lead to a remote code injection.

← Alle CVE's bekijken Bekijk op cve.org ↗