Feehi CMS arbitrary file upload vulnerability

2022-05-2417:40:04

Google

osv.dev

0.008 Low

EPSS

Percentile

82.0%

JSON

Feehi CMS 2.1.0-beta is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files.

CPENameOperatorVersion
feehi/cmseq0.0.9
feehi/cmseq1.0.0beta3
feehi/cmseq2.0.5.1
feehi/cmseq0.0.8
feehi/cmseq2.0.7
feehi/cmseq2.0.5
feehi/cmseq0.0.6
feehi/cmseq1.0.0alpha2
feehi/cmseq0.0.3
feehi/cmseq1.0.0beta1

Name	Operator	Version
feehi/cms	eq	0.0.9
feehi/cms	eq	1.0.0beta3
feehi/cms	eq	2.0.5.1
feehi/cms	eq	0.0.8
feehi/cms	eq	2.0.7
feehi/cms	eq	2.0.5
feehi/cms	eq	0.0.6
feehi/cms	eq	1.0.0alpha2
feehi/cms	eq	0.0.3
feehi/cms	eq	1.0.0beta1