~ / search / GHSA-vqvm-qrwh-69h7

GHSA-vqvm-qrwh-69h7

easyii CMS's File Upload Management vulnerable to unrestricted upload

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-3771

Packages

EcosystemPackageAffectedFixed in
Packagist noumo/easyii <= 0.9 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

This issue affects the function file of the file helpers/Upload.php of the component File Upload Management. The manipulation leads to unrestricted upload. The attack may be initiated remotely.

References

External links from the advisory. They lead to third-party sites.