CVE-2022-42092: Backdrop CMS Unrestricted File Upload vulnerability
Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution.
Other sources
Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via themes that allows attackers to achieve Remote Code Execution.
— GitHub
Backdrop CMS Unrestricted File Upload vulnerability
— Packagist
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-42092?
CVE-2022-42092 is a vulnerability in Backdrop CMS 1.22.0 that allows attackers to execute remote code through unrestricted file upload in 'themes'.
How severe is CVE-2022-42092?
CVE-2022-42092 has a severity rating of 7.2 (high).
How does CVE-2022-42092 occur?
CVE-2022-42092 occurs due to an unrestricted file upload vulnerability in the 'themes' feature of Backdrop CMS 1.22.0.
What software version is affected by CVE-2022-42092?
Backdrop CMS 1.22.0 is affected by CVE-2022-42092.
Is there a fix for CVE-2022-42092?
Yes, updating to a version higher than 1.22.0 of Backdrop CMS resolves the CVE-2022-42092 vulnerability.