CVE-2022-25497

Medium

CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function.

mitre·CWE-552·Published 2022-03-15

CVSS

5.3

EPSS

0.04

KEV

Exploits

cve.orgen

85 chars

CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function.

NVDen

85 chars

CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function.

NVDes

115 chars

Se ha detectado que CuppaCMS versión v1.0, contiene una lectura arbitraria de archivos por medio de la función copy

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N