CVE-2022-42092

HIGH 7.2EPSS 1.6%

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required.

CVSS v3.1: 7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.59% chance of exploitation in the next 30 days, 74th percentile
Published: 2022-10-07
Updated: 2024-08-03

Proof-of-concept exploits (2)

References

Related