What is GHSA-33c9-rppf-m7fq?

GHSA-33c9-rppf-m7fq is a security advisory published by GitHub Security Advisories with High severity. Backdrop CMS Unrestricted File Upload vulnerability

Which CVE IDs does GHSA-33c9-rppf-m7fq cover?

GHSA-33c9-rppf-m7fq covers the following CVE IDs: CVE-2022-42092. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-33c9-rppf-m7fq?

GHSA-33c9-rppf-m7fq has a CVSS v3 base score of 7.2, published by GitHub Security Advisories.

Which products are affected by GHSA-33c9-rppf-m7fq?

GHSA-33c9-rppf-m7fq affects 1 product, including: composer/backdrop/backdrop:\u003c= 1.22.0.

GHSA-33c9-rppf-m7fqHighCVSS 7.2

Backdrop CMS Unrestricted File Upload vulnerability

Vendor

GitHub Security Advisories

Published

October 7, 2022

Last Modified

February 3, 2023

🔗 CVE IDs covered (1)

CVE-2022-42092 →

📋 Description

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via themes that allows attackers to achieve Remote Code Execution.

🎯 Affected products1

composer/backdrop/backdrop:<= 1.22.0

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2022-42092
https://grimthereaperteam.medium.com/backdrop-cms-1-22-0-unrestricted-file-upload-themes-ad42a599561c
https://github.com/advisories/GHSA-33c9-rppf-m7fq