PT-2025-10792
CVE-2025-22213
·
Published
2025-02-25
·
Updated
2025-03-24
Description by
CVSS 4.0
7.1
HighMetricsAV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/AU:N
Name of the Vulnerable Software and Affected Versions:
The product name cannot be determined.
Description:
Inadequate checks in the Media Manager allowed users with "edit" privileges to change file extension to arbitrary extension, including .php and other potentially executable extensions.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾