PT-2022-18192 · Unknown · Mogu Blog Cms

Shitmoutainc0De · Published 2022-04-08 · Updated 2022-04-15 · CVE-2022-27047

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions mogu blog cms version 5.2

Description The issue allows for the upload of arbitrary files without any limitations.

Recommendations For mogu blog cms version 5.2, restrict access to file upload functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2022-27047

Affected Products

Mogu Blog Cms

References · 4

• https://osv.dev/vulnerability/CVE-2022-27047 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27047 · Security Note
• https://github.com/moxi624/mogu_blog_v2/issues/62 · Note
• https://t.me/cibsecurity/40392 · Telegram Post