Kurz gesagt
- CVE-2020-22643 ist eine Schwachstelle (HOCH (CVSS 7.2)) in feehi/cms, feehi cms (feehi).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.0%, höher als bei 80.7% aller Schwachstellen.
- Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.
| Package | Affected versions | Patched versions |
|---|
| feehi/cms Packagist | ≤ 2.1.0-beta
| No fix yet |
| feehi cms | = 2.1.0
| No fix yet |
Description
Feehi CMS 2.1.0-beta is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files.
NVD description
Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free