CVE-2022-28053 - Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the upload function

Back Back to CVE browser

HIGH

Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the upload function

Published Apr 25, 2022

8.8

HIGH

CVSS 3.1

EPSS 1.27%

Description

Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (1)

https://github.com/typemill/typemill/issues/325
x_refsource_MISCExploitIssue TrackingThird Party Advisory

Link	Providers	Tags
https://github.com/typemill/typemill/issues/325		x_refsource_MISCExploitIssue TrackingThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 25, 2022

Updated Aug 3, 2024

Reserved Mar 28, 2022

Link CVE-2022-28053

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-28053

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-28053