CVE-2022-25401: High severity tina tinacms vulnerability
Published Feb 23, 2022
·Updated
The copy function of the file manager in Cuppa CMS v1.0 allows any file to be copied to the current directory, granting attackers read access to arbitrary files.
Affected Software
1 affected component
CuppaCMS CuppaCMS=1.0
Event History
Feb 23, 2022
CVE Published
via MITRE·09:11 PM
Data Sourced
via MITRE·09:11 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-25401?
CVE-2022-25401 is classified as a high severity vulnerability due to its potential for unauthorized file access.
2
How do I fix CVE-2022-25401?
To fix CVE-2022-25401, update Cuppa CMS to the latest version that addresses this vulnerability.
3
What types of attacks can exploit CVE-2022-25401?
CVE-2022-25401 can be exploited by attackers to gain unauthorized read access to sensitive files on the server.
4
Which versions of Cuppa CMS are affected by CVE-2022-25401?
CVE-2022-25401 specifically affects Cuppa CMS version 1.0.
5
How can I determine if my system is vulnerable to CVE-2022-25401?
You can determine if your system is vulnerable to CVE-2022-25401 by checking if you are running Cuppa CMS version 1.0 and testing the copy functionality.