CyberSecBulletin

Zenario CMS vulnerabilities

We track 1 vulnerability in Zenario CMS products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 24, 2022.

1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score

Latest Zenario CMS vulnerabilities

  • 7.2 High severity

    Zenario CMS: Unrestricted Upload of File with Dangerous Type

    CVE-2022-23043Zenario CMSEPSS 1.46%

    Zenario CMS 9.2 allows an authenticated admin user to bypass the file upload restriction by creating a new 'File/MIME Types' using the '.phar' extension. Then an attacker can upload a malicious file, intercept the request and change the extension to '.phar' in