CVE-2022-42092

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution

published October 7, 2022

CVSS
—
EPSS
2%
Percentile
81.0
In the wild
Unconfirmed
What it is

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02044 · 81.0th percentile
Published
2022-10-07T00:00Z
EPSS history
Timeline
  • 07 OCT 00:00Z
    Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution
    cvelistv5