CVE-2022-26149
CVE-2022-26149
This page contains facts from public vulnerability sources. Check the original advisory before updating.
MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Uploadable File Types setting can be changed by an administrator.
CVSS 7.2 · High · EPSS 9.3% · Public exploit
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
modx/revolution Packagist
- Versions
- v2.7.0-pl
- v2.7.1-pl
- v2.7.2-pl
- v2.7.3-pl
- v2.8.0-pl
- v2.8.1-pl
- v2.8.2-pl
- v2.8.3-pl
- Affected ranges
- ECOSYSTEM: ≤ 2.8.3-pl
No fix published