CVE-2022-30423

2022-05-2713:38:47

mitre

www.cve.org

arbitrary code execution

merchandise online store

user profile upload

AI Score

9.9

Confidence

High

EPSS

0.003

Percentile

69.6%

JSON

Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information.

References

github.com/ffYYy6x0y1/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/RCE-1.md