COOEY // HUBcompliance · community · intelligence

Exposures › CVE-2022-29347

CVE-2022-29347

Severity
critical
Source
NVD · cve
Published
2022-05-04
CVSS
9.8
Reference
https://nvd.nist.gov/vuln/detail/CVE-2022-29347
⚡ RCE shame 50/100 rce

An arbitrary file upload vulnerability in Web@rchiv 1.0 allows attackers to execute arbitrary commands via a crafted PHP file.

Players implicated

web\@rchiv project · vendorweb\@rchiv · product

Description

An arbitrary file upload vulnerability in Web@rchiv 1.0 allows attackers to execute arbitrary commands via a crafted PHP file.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.