CVE-2022-25401

Name of the Vulnerable Software and Affected Versions Cuppa CMS version 1.0

Description The issue allows attackers to gain read access to arbitrary files by copying any file to the current directory using the copy function of the file manager.

Recommendations For Cuppa CMS version 1.0, consider restricting access to the copy function of the file manager to prevent attackers from copying arbitrary files to the current directory. As a temporary workaround, consider disabling the copy function until a patch is available.