CVE-2022-27061

AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post Image function under the Admin panel

published April 8, 2022

CVSS
—
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post Image function under the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02673 · 85.7th percentile
Published
2022-04-08T08:23Z
EPSS history
Timeline
  • 08 APR 08:23Z
    AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post Image function under the Admin panel
    cvelistv5