CVE-2022-37191

The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI

published September 13, 2022

CVSS
—
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user can read system files via crafted POST request using [function] parameter value as LFI payload.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03247 · 88.2th percentile
Published
2022-09-13T22:07Z
EPSS history
Timeline
  • 13 SEP 22:07Z
    The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI
    cvelistv5