Unscored CVE-2022-36197 EUVD-2022-38916GHSA-74w5-v2mx-3497

BigTree CMS 4.4.16 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a …

Published Aug 3, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

BigTree CMS 4.4.16 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PDF file.

References

https://github.com/bigtreecms/BigTree-CMS/issues/392