HIGH7.2

GHSA-65x8-9vgm-5fg5

Feehi CMS arbitrary file upload vulnerability

Details

Feehi CMS 2.1.0-beta is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/feehi/cms

Introduced in: 0

No fixed version published yet for feehi/cms (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2020-22643[ADVISORY]
https://github.com/liufee/cms/issues/51[WEB]
https://github.com/liufee/cms[PACKAGE]