Lucene search

K
nvd[email protected]NVD:CVE-2022-4606
HistoryDec 18, 2022 - 1:15 p.m.

CVE-2022-4606

2022-12-1813:15:09
CWE-98
web.nvd.nist.gov
3
github
repository
flatpress
php
remote file inclusion
vulnerability
prior to 1.3

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

73.1%

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3.

Affected configurations

Nvd
Node
flatpressflatpressRange1.2.1
VendorProductVersionCPE
flatpressflatpress*cpe:2.3:a:flatpress:flatpress:*:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

73.1%

Related for NVD:CVE-2022-4606