CVE-2022-27257

CVE-2022-27257 is a PHP Local File Inclusion affecting Hubzilla via the default Redbasic theme. It allows remote attackers to include arbitrary PHP files through the schema parameter in versions prior to 7.2. Public sources (NVD/Red Hat/CNVD/etc.) confirm the vulnerability in Hubzilla before 7.2....

CVE-2022-27257

A PHP Local File Inclusion vulneraility in the default Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter...