PT-2022-19797

CVE-2022-29720

Published

2022-05-26

Updated

2022-06-03

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1

Description The issue is related to an arbitrary file read vulnerability. It affects the component indexcontrollerDownload.php.

Recommendations For 74cmsSE version 3.5.1, update to a version that fixes the arbitrary file read vulnerability in the Download.php component.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾