CRITICAL9.8

GHSA-vqvm-qrwh-69h7

easyii CMS's File Upload Management vulnerable to unrestricted upload

Details

This issue affects the function file of the file helpers/Upload.php of the component File Upload Management. The manipulation leads to unrestricted upload. The attack may be initiated remotely.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/noumo/easyii

Introduced in: 0

No fixed version published yet for noumo/easyii (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-3771[ADVISORY]
https://github.com/noumo/easyii[PACKAGE]
https://vuldb.com/?id.212501[WEB]