CVE-2021-36573
published 2022-12-15CVE-2021-36573: File Upload vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via crafted image upload.
PriorityP429medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.46%
36.8th percentile
File Upload vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via crafted image upload.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| feehi | feehicms | <= 2.1.1 | — |
| feehi | feehicms | 0 – 2.1.1 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
FeehiCMS Unrestricted Upload vulnerability
ghsa·2022-12-15
CVE-2021-36573 [MEDIUM] CWE-434 FeehiCMS Unrestricted Upload vulnerability
FeehiCMS Unrestricted Upload vulnerability
File Upload vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via crafted image upload.
OSV
FeehiCMS Unrestricted Upload vulnerability
osv·2022-12-15
CVE-2021-36573 [MEDIUM] FeehiCMS Unrestricted Upload vulnerability
FeehiCMS Unrestricted Upload vulnerability
File Upload vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via crafted image upload.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-15
Published