high8.8
CVE-2022-31362
Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability.
Impact
Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Docebo | Docebo | through 4.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.formalms.org/about/blog/20-life-after-docebo-the-forma-project-begins.html
- https://www.swascan.com/security-advisory-docebo-community-edition/
- https://blog.formalms.org/about/blog/20-life-after-docebo-the-forma-project-begins.html
- https://www.swascan.com/security-advisory-docebo-community-edition/