VULNERABILITY INTELLIGENCE

CVE-2022-45052

CVSS score8.8 HIGH
EPSS probability0.75%
CISA KEVNot currently listed
Published2023-01-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user input on the url parameter on the Proxy.type.php endpoint, external users are capable of accessing files on the server.

Weakness classification

  • CWE-552: Files or Directories Accessible to External Parties

Primary references