CVE-2022-39036: FLOWRING Agentflow BPM - Arbitrary File Upload
The file upload function of Agentflow BPM has insufficient filtering for special characters in URLs. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary file and execute arbitrary code to manipulate system or disrupt service.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2022-39036?
CVE-2022-39036 has a high severity rating due to its potential for remote code execution by unauthenticated attackers.
How do I fix CVE-2022-39036?
To fix CVE-2022-39036, update Agentflow BPM to the latest version that addresses this file upload vulnerability.
What is the impact of CVE-2022-39036?
CVE-2022-39036 allows attackers to upload arbitrary files and execute code, potentially compromising the system and disrupting services.
Who is affected by CVE-2022-39036?
CVE-2022-39036 affects users of Agentflow BPM version 4.0.0.1183.552 due to its insufficient filtering of special characters.
Is CVE-2022-39036 being actively exploited?
While specific exploitation reports for CVE-2022-39036 are not widely publicized, its nature suggests it is a significant risk for unpatched systems.