CVE-2022-40443

2022-09-2213:32:34

mitre

www.cve.org

zzcms

path traversal

sensitive information

get request

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.3%

JSON

An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php.

References

github.com/liong007/ZZCMS/issues/1