CVE-2022-29632: Malicious File Upload
Published May 26, 2022
·Updated
An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attackers to execute arbitrary code via a crafted file.
Affected Software
1 affected component
Roncoo Roncoo-education=9.0.0
Event History
May 26, 2022
CVE Published
via MITRE·07:55 PM
Data Sourced
via MITRE·07:55 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-29632?
CVE-2022-29632 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2022-29632?
To fix CVE-2022-29632, you should upgrade to a patched version of Roncoo Education that addresses this vulnerability.
3
Who is affected by CVE-2022-29632?
CVE-2022-29632 affects users of Roncoo Education version 9.0.0.
4
What type of vulnerability is CVE-2022-29632?
CVE-2022-29632 is classified as an arbitrary file upload vulnerability.
5
What components are involved in CVE-2022-29632?
CVE-2022-29632 involves the file upload functionality in the component /course/api/upload/pic of Roncoo Education.