Remote Code Execution in Emlog Pro Plugin by Wszdhf
CVE-2022-42189

7.2HIGH

Key Information:

Vendor

Emlog

Status
Emlog
Vendor
CVE Published:
21 October 2022

What is CVE-2022-42189?

The Emlog Pro plugin version 1.6.0 contains a vulnerability that allows remote attackers to execute arbitrary code on the server. By exploiting this weakness, an unauthorized user can upload malicious scripts, potentially compromising the integrity and confidentiality of the underlying system. This presents a significant risk for users who have not updated to a patched version. Ensure your installations are secure by monitoring for updates and applying them promptly.

References

https://github.com/wszdhf/cms_vul/blob/main/emlog_pro_1.6...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.