Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-29622
HistoryMay 16, 2022 - 2:15 p.m.

Design/Logic Flaw

2022-05-1614:15:00
PRIOn knowledge base
www.prio-n.com
5

9.5 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.5%

An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via a crafted filename. NOTE: some third parties dispute this issue because the product has common use cases in which uploading arbitrary files is the desired behavior. Also, there are configuration options in all versions that can change the default behavior of how files are handled.

CPENameOperatorVersion
formidableeq3.1.4

9.5 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.5%