VULNERABILITY INTELLIGENCE

CVE-2022-25401

CVSS score7.5 HIGH
EPSS probability2.25%
CISA KEVNot currently listed
Published2022-02-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

The copy function of the file manager in Cuppa CMS v1.0 allows any file to be copied to the current directory, granting attackers read access to arbitrary files.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references