← volver
CVE-2022-42458

CVE-2022-42458

CVSS 9.8 CRITICALEPSS 1.1%CWE-287
Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a remote unauthenticated attacker to upload an arbitrary file. As a result, an arbitrary script may be executed and/or a file may be altered.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Shift Tech Inc. · bingo!CMS

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →