CVE-2022-4300
FastCMS Template edit injection
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
A vulnerability was found in FastCMS. It has been rated as critical. This issue affects some unknown processing of the file /template/edit of the component Template Handler. The manipulation leads to injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214901 was assigned to this vulnerability.
Se encontró una vulnerabilidad en FastCMS. Ha sido calificada como crítica. Este problema afecta un procesamiento desconocido del archivo /template/edit del componente Template Handler. La manipulación conduce a la inyección. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-214901.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-12-06 CVE Reserved
- 2022-12-06 CVE Published
- 2024-06-28 EPSS Updated
- 2024-08-03 CVE Updated
- 2024-08-03 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-94: Improper Control of Generation of Code ('Code Injection')
- CWE-707: Improper Neutralization
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
https://vuldb.com/?id.214901 | Third Party Advisory |
URL | Date | SRC |
---|---|---|
https://github.com/Ha0Liu/cveAdd/blob/developer/fastcms%E6%A8%A1%E7%89%88%E6%B3%A8%E5%85%A5/fastcms%20template%20injection%20vulnerability.md | 2024-08-03 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|