CVE-2022-42092

Impact

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via `themes` that allows attackers to achieve Remote Code Execution.

Affected packages

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://grimthereaperteam.medium.com/backdrop-cms-1-22-0-unrestricted-file-upload-themes-ad42a599561c
• https://github.com/advisories/GHSA-33c9-rppf-m7fq
• https://nvd.nist.gov/vuln/detail/CVE-2022-42092