CVE-2022-43192

An arbitrary file upload vulnerability in the component /dede/file_manage_control.php of Dedecms v5.7.101 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is related to an incomplete fix for CVE-2022-40886.

CVSS v3.1

6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.36% chance of exploitation in the next 30 days, 29th percentile

Published

2022-11-17

Updated

2025-04-29

Proof-of-concept exploits (1)

• linchuzhu/Dedecms-v5.7.101-RCE2★ · 2022-10-10

References

• CVE Record
• NVD entry

Related

• CVE-2022-43185
• CVE-2022-4320
• CVE-2022-43183
• CVE-2022-4321
• CVE-2022-43171
• CVE-2022-43221