CVE-2022-38296 - Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager

CRITICAL

Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager

Published Sep 12, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 5.14%

Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager.

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-40888		Advisory
https://github.com/CuppaCMS/CuppaCMS/issues/33		x_refsource_MISCExploitIssue TrackingThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Sep 12, 2022

Updated Aug 3, 2024

Reserved Aug 15, 2022

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Sep 12, 2022

Updated Aug 3, 2024

Exploited since n/a