Lucene search

K
cvelistMitreCVELIST:CVE-2022-45338
HistoryDec 15, 2022 - 12:00 a.m.

CVE-2022-45338

2022-12-1500:00:00
mitre
www.cve.org
1
arbitrary file upload
profile picture upload
exact synergy enterprise
svg file
remote code execution

EPSS

0.001

Percentile

24.1%

An arbitrary file upload vulnerability in the profile picture upload function of Exact Synergy Enterprise 267 before 267SP13 and Exact Synergy Enterprise 500 before 500SP6 allows attackers to execute arbitrary code via a crafted SVG file.

EPSS

0.001

Percentile

24.1%

Related for CVELIST:CVE-2022-45338