CVEvulnerability
CVE-2022-47769
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-02-01
- Last modified
- 2026-07-09
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-434
Description
An arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1.0 allows unauthenticated attackers to upload malicious files in the web root of the application to gain access to the server via the web shell.
Affected configurations
• serinf fast checkin 1.0
Related
Weakness · CWE (1)
- CWE-434 Unrestricted Upload of File with Dangerous Type weakness
References
- https://www.swascan.com/it/security-advisory-serenissima-informatica-fastcheckin/ Exploit, Third Party Advisory
- https://www.swascan.com/it/security-advisory-serenissima-informatica-fastcheckin/ Exploit, Third Party Advisory