CVE-2022-25581

Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload

published March 18, 2022

CVSS
—
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload. This vulnerability allows attackers to execute code injection via a crafted .txt file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01176 · 67.3th percentile
Published
2022-03-18T22:25Z
EPSS history
Timeline
  • 18 MAR 22:25Z
    Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload
    cvelistv5