CVE-2022-30423

Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-06-02

Last modified

2024-08-03

Weaknesses

CWE-434

Affected products

• Merchandise Online Store (Merchandise Online Store Project)

References

• https://github.com/ffYYy6x0y1/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/RCE-1.md