CVE-2022-24609

2022-03-0913:32:02

mitre

www.cve.org

luocms v2.0

access control

vulnerability

arbitrary shell file

cve-2022-24609

AI Score

9.7

Confidence

High

EPSS

0.004

Percentile

72.6%

JSON

Luocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/template_manage.php, an attacker can write an arbitrary shell file.

References

github.com/jsjbcyber/bug_report/blob/main/bug_p