CVE-2022-4446

PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0...

CVE-2022-4446 PHP Remote File Inclusion in tsolucio/corebos

PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0...

CVE-2022-4446

CVE-2022-4446 is a PHP Remote File Inclusion vulnerability affecting coreBOS (GitHub: tsolucio/corebos) prior to version 8.0. The issue stems from how install/ConfirmMigrationConfig.php accepts a source_directory parameter and stores it in the session, which is later used by install/MigrationDbBa...