File Upload Bypass in Zenario CMS by Tribal Systems

CVE-2022-23043

What is CVE-2022-23043?

Zenario CMS version 9.2 is susceptible to a file upload bypass vulnerability that allows an authenticated admin user to circumvent file upload restrictions. By creating a 'File/MIME Type' with the '.phar' extension, an attacker can upload a malicious file. Subsequently, they can intercept the upload request and manipulate the file extension to '.phar', enabling the execution of commands on the server. This vulnerability poses significant security risks if left unpatched, as it permits unauthorized access and control over the web application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References