Unknown · Shirne Cms · CVE-2022-37299
**Name of the Vulnerable Software and Affected Versions**
Shirne CMS version 1.2.0
**Description**
The issue is related to a Path Traversal vulnerability that could cause arbitrary file read. This is possible via the /static/ueditor/php/controller.php endpoint.
**Recommendations**
For Shirne CMS version 1.2.0, as a temporary workaround, consider restricting access to the /static/ueditor/php/controller.php endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.