Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2022-42092

Description

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required.

POC

Reference

- https://grimthereaperteam.medium.com/backdrop-cms-1-22-0-unrestricted-file-upload-themes-ad42a599561c

Github

- https://github.com/Ferch-K9/Dog

- https://github.com/ajdumanhug/CVE-2022-42092

- https://github.com/eetukarttunen/security-testing

- https://github.com/plzheheplztrying/cve_monitor

- https://github.com/zulloper/cve-poc