CVE-2022-23166

Sysaid – Sysaid Local File Inclusion (LFI)

Medium · published May 12, 2022

CVSS v3.1
6.1
EPSS
1%
Percentile
66.3
In the wild
Unconfirmed
What it is

Sysaid – Sysaid Local File Inclusion (LFI) – An unauthenticated attacker can access to the system by accessing to "/lib/tinymce/examples/index.html" path. in the "Insert/Edit Embedded Media" window Choose Type : iFrame and File/URL : [here is the LFI] Solution: Update to 22.2.20 cloud version, or to 22.1.64 on premise version.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01140 · 66.3th percentile
Published
2022-05-12T19:49Z
EPSS history
Timeline
  • 12 MAY 19:49Z
    Sysaid – Sysaid Local File Inclusion (LFI)
    cvelistv5