CVE-2022-29637 - An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file

HIGH

An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file

Published May 26, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.86%

An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file.

Ecosystem	Package	Introduced	Fixed
Go	github.com/mindoc-org/mindoc	0	not fixed

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3717		Advisory
https://github.com/advisories/GHSA-f7ff-xf87-f22q		Advisory
https://github.com/mindoc-org/mindoc/issues/788		x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-29637