← back
CVE-2022-42458

CVE-2022-42458

CVSS 9.8 CRITICALEPSS 1.1%CWE-287
Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a remote unauthenticated attacker to upload an arbitrary file. As a result, an arbitrary script may be executed and/or a file may be altered.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Shift Tech Inc. · bingo!CMS

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://jvn.jp/en/jp/JVN74592196/index.htmlhttps://www.bingo-cms.jp/information/20221011.html