CVE-2022-43660highCWE-94

CVE-2022-43660: falha de alta gravidade em Six Apart Ltd. Movable Type

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Movable Type

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.2epss 1.0%
Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series allows a remote authenticated attacker with Privilege of 'Manage of Content Types' may execute an arbitrary Perl script and/or an arbitrary OS command. Affected products/versions are as follows: Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Six Apart Ltd. · Movable Type
CVEs relacionadas — Six Apart Ltd. Movable Type

No mesmo produto, das mais perigosas para as menos.

CVE-2021-20837—CVE-2021-20837EPSS 88.1%CVE-2020-5577—CVE-2020-5577EPSS 1.7%CVE-2020-5574—CVE-2020-5574EPSS 1.2%CVE-2020-5575—CVE-2020-5575EPSS 0.9%CVE-2021-20814—CVE-2021-20814EPSS 0.9%CVE-2021-20810—CVE-2021-20810EPSS 0.9%