CVE-2022-28528: Malicious File Upload
Published Apr 26, 2022
·Updated
bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?mode=content&page=media&action=edit.
Affected Software
1 affected component
bloofox bloofoxCMS=0.5.2.1
Event History
Apr 26, 2022
CVE Published
via MITRE·08:29 PM
Data Sourced
via MITRE·08:29 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this arbitrary file upload vulnerability in bloofoxCMS?
The vulnerability ID for this arbitrary file upload vulnerability in bloofoxCMS is CVE-2022-28528.
2
What is the severity level of CVE-2022-28528?
CVE-2022-28528 has a severity level of high.
3
What software version is affected by CVE-2022-28528?
The affected software version is bloofoxCMS v0.5.2.1.
4
How can an attacker exploit CVE-2022-28528?
An attacker can exploit CVE-2022-28528 by uploading arbitrary files through the /admin/index.php?mode=content&page=media&action=edit endpoint in bloofoxCMS.
5
Is there a fix available for CVE-2022-28528?
At the moment, there is no specific fix available for CVE-2022-28528. It is recommended to update to a newer version of bloofoxCMS when a patch is released.