Cszcms

Records31All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical11CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Cszcms records in CISA KEV

No Cszcms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Csz Cms 29 records HIGH Cszcms 1 record LOW

Records

1 record in Cszcms · all components

TI-2022-11576 CVE-2022-28997 · GHSA-px2q-6q9w-p7wc

CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can…

LOW 37

CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02077 Published 2022-05-23 No fix listed CWE-918

Open these records in search →

Critical	11
High	4
Medium	16
Low	0
No CVSS	0