Description
SiteServer CMS v7.x, which SiteServer UI relies on, allows attackers to execute arbitrary code via a crafted plug-in.
Recommendation
No fix is available yet. Followings are affected versions:
- >= 7.0.0
References
Related Issues
- Uncontrolled Resource Consumption in Hawk - CVE-2022-29167
- Parsing issue in matrix-org/node-irc leading to room takeovers - CVE-2022-39203
- matrix-appservice-irc vulnerable to IRC mode parameter confusion - CVE-2022-39202
- secp256k1-js implements ECDSA without required r and s validation, leading to signature forgery - CVE-2022-41340
You might also like:
- Tags:
- npm
- siteserver
Anything's wrong? Let us know Last updated on July 11, 2023