CVE-2022-42092: Unrestricted Upload of File with Dangerous Type

October 7, 2022 (updated January 18, 2023)

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via ’themes’ that allows attackers to Remote Code Execution.

References

github.com/advisories/GHSA-33c9-rppf-m7fq
grimthereaperteam.medium.com/backdrop-cms-1-22-0-unrestricted-file-upload-themes-ad42a599561c
nvd.nist.gov/vuln/detail/CVE-2022-42092

Detect and mitigate CVE-2022-42092 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →