GitHub Advisoryadvisory · npm

GHSA-q469-j32f-h7vm RCE in SiteServer CMS

CRITICAL Published 2022-05-04 Modified 2023-07-11 Official page ↗

Aliases: CVE-2022-28118
Ecosystem: npm
Packages: siteserver
Severity: Critical
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Reviewed: 2023-07-11

Affected packages

• npm siteserver: >= 7.0.0 (no fix yet)

Description

SiteServer CMS v7.x, which SiteServer UI relies on, allows attackers to execute arbitrary code via a crafted plug-in.

Related

Alias · CVE (1)

CVE-2022-28118 SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in. vulnerability

References