Unknown · Canteen Management System · CVE-2022-43277
**Name of the Vulnerable Software and Affected Versions**
Canteen Management System version 1.0
**Description**
The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability. This is achievable through the "ip/youthappam/php action/editFile.php" API endpoint.
**Recommendations**
For version 1.0, as a temporary workaround, consider disabling the file upload functionality via the "ip/youthappam/php action/editFile.php" endpoint until a patch is available. Restrict access to this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.