PT-2022-25354 · Unknown · Mojoportal

Dat Hoang

+1

·

CVE-2022-40341

·

Published

2022-09-30

·

Updated

2025-05-20

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions mojoPortal version 2.7
Description The issue allows attackers to execute arbitrary code via a crafted PNG file, exploiting an arbitrary file upload vulnerability.
Recommendations For mojoPortal version 2.7, consider disabling the file upload feature until a patch is available to prevent exploitation of the arbitrary file upload vulnerability.

Exploit

Fix

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2022-40341

Affected Products

Mojoportal