CVE-2022-42092
CVE-2022-42092
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required.
CVSS 7.2 · High · EPSS 2.1%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
backdrop/backdrop Packagist
- Versions
- 1.13.2-rc1
- 1.13.2-rc2
- 1.17.3
- 1.18.3
- 1.19.1
- 1.20.3
- 1.21.0
- 1.21.1
- 1.21.3
- 1.21.4
- Affected ranges
- ECOSYSTEM: ≤ 1.22.0
No fix published