CVE-2022-37159

Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload...

CVE-2022-37159

creationtimestamp| type| source ---|---|--- 2022-08-25 20:23:54+00:00| seen| https://t.me/cibsecurity/48785...

CVE-2022-37159

Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload...

CVE-2022-37159

CVE-2022-37159 affects Claroline 13.5.7 and earlier. The vulnerability is Remote Code Execution through arbitrary file upload, arising from insecure file upload handling. The NVD/Red Hat/etc. entries annotate a critical impact (CVSS 3.1: 9.8) with network attack, no user interaction, and high imp...