CVE-2022-41705

CVE-2022-41705 affects Badaso 2.6.3 (a Laravel Vue headless CMS). An unauthenticated remote attacker can execute arbitrary code on the server due to improper validation of user-uploaded data. This yields high impact to confidentiality, integrity, and availability (CVSS v3.1 base score 9.8). Sever...