CVE-2022-25401

The copy function of the file manager in Cuppa CMS v1.0 allows any file to be copied to the current directory, granting attackers read access to arbitrary files...

CVE-2022-25401

CVE-2022-25401 affects Cuppa CMS v1.0. The vulnerability lies in the file manager’s copy function, which allows copying any file into the current directory, granting attackers read access to arbitrary files. This is described across multiple connected sources (NVD entry and related advisories) as...