Vulnerabilities

TI-2022-18959 CVE-2022-40035 · GHSA-7c33-9gxw-xjff

File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute…

HIGH 73

File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escalated privileges via the /uploadFileList component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02277 Published 2023-01-25 No fix listed CWE-434

TI-2022-18960 CVE-2022-40036 · GHSA-9v5h-8xpf-qvgq

An issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive…

MEDIUM 62

An issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive user information by bypassing permission checks via the /adminGetUserList component.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00702 Published 2023-01-24 No fix listed CWE-284

Vulnerabilities

Filters

File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute…

An issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive…