CVE-2022-34971: Unrestricted Upload of File with Dangerous Type

July 27, 2022 (updated August 2, 2022)

An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code via a crafted PHP file.

References

github.com/liufee/cms/issues/62
nvd.nist.gov/vuln/detail/CVE-2022-34971

Detect and mitigate CVE-2022-34971 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →