Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-43234 EUVD-2022-46278GHSA-jcm4-6q6w-v7vj

An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted…

Published Nov 16, 2022 · Updated Apr 30, 2025 · Assigned by mitre

Description

An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file.

References