VULNERABILITY INTELLIGENCE

CVE-2022-3549

CVSS score4.7 MEDIUM

EPSS probability0.76%

CISA KEVNot currently listed

Published2022-10-17

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /csms/admin/?page=user/manage_user of the component Avatar Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211049 was assigned to this vulnerability.

Weakness classification

CWE-266: Incorrect Privilege Assignment
CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references

cna@vuldb.com — Third Party Advisory
cna@vuldb.com — Permissions Required, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Third Party Advisory