1. Home
  2. CVE Database
  3. CVE-2022-25497
MEDIUM · 5.3

CVE-2022-25497

CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function.

Vulnerability Description

CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
CuppacmsCuppacms1.0

Related Weaknesses (CWE)

CWE-552

References

FAQ

What is CVE-2022-25497?

CVE-2022-25497 is a vulnerability with a CVSS score of 5.3 (MEDIUM). CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function.

How severe is CVE-2022-25497?

CVE-2022-25497 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-25497?

Check the references section above for vendor advisories and patch information. Affected products include: Cuppacms Cuppacms.