CVE-2022-34919

2022-08-2300:57:38

mitre

www.cve.org

zengenti contensis classic

file upload

vulnerability

crafted aspx file

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

59.3%

JSON

The file upload wizard in Zengenti Contensis Classic before 15.2.1.79 does not correctly check that a user has authenticated. By uploading a crafted aspx file, it is possible to execute arbitrary commands.

References

github.com/ahajnik/CVE-2022-34919

www.zengenti.com/