Files or Directories Accessible to External Parties

CVE-2022-25497

Medium

5.3/10

Summary

CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: LOW
Availability Impact: NONE

CWE-552 - Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References

Advisory Timeline

Published Mar 15, 2022