CVE-2022-34965

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability via the component /ossn/administrator/com_installer. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Note: The project owner believes this is intended behavior of the application as it only allows authenticated admins to upload files.

CVSS v3.1

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

2.06% chance of exploitation in the next 30 days, 80th percentile

Published

2022-07-25

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://grimthereaperteam.medium.com/cve-2022-34965-open-source-social-network-6-3-3f61db…

References

• CVE Record
• NVD entry

Related

• CVE-2022-34964
• CVE-2022-34966
• CVE-2022-34963
• CVE-2022-34968
• CVE-2022-34962
• CVE-2022-34970