critical9.8
CVE-2022-29632
An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attackers to execute arbitrary code via a craf…
Impact
An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attackers to execute arbitrary code via a crafted file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Roncoo | Roncoo-Education | Version 9.0.0 |