Arbitrary File Upload Vulnerability in Typemill by Typemill
CVE-2022-28053

8.8HIGH

Key Information:

Vendor

Typemill

Status
Typemill
Vendor
CVE Published:
25 April 2022

What is CVE-2022-28053?

Typemill version 1.5.3 is prone to an arbitrary file upload vulnerability through its upload functionality. This flaw may allow an attacker to upload a specially crafted PHP file, potentially leading to the execution of arbitrary code on the server. This presents significant risks to the integrity and confidentiality of the application and its data.

References

https://github.com/typemill/typemill/issues/325
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.