Lucene search
HistoryDec 07, 2022 - 10:15 a.m.
CVE-2022-42458
cve-2022-42458
remote attacker
arbitrary file upload
arbitrary script execution
file alteration
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.004
Percentile
73.3%
Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a remote unauthenticated attacker to upload an arbitrary file. As a result, an arbitrary script may be executed and/or a file may be altered.
Affected configurations
Node
shift-techbingo\!cmsRange≤1.7.4.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| shift-tech | bingo\!cms | * | cpe:2.3:a:shift-tech:bingo\!cms:*:*:*:*:*:*:*:* |
Related
prion
prion
Path traversal
2022-12-07 10:15:00
attackerkb
attackerkb
CVE-2022-42458
2022-12-07 00:00:00
jvn
jvn
JVN#74592196: bingo!CMS vulnerable to authentication bypass
2022-10-11 00:00:00
cve
cve
CVE-2022-42458
2022-12-07 10:15:11
cvelist
cvelist
CVE-2022-42458
2022-12-07 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.004
Percentile
73.3%
Related for NVD:CVE-2022-42458