CVE-2022-40050

ZFile v4.1.1 was discovered to contain an arbitrary file upload vulnerability via the component /file/upload/1.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-09-26

Last modified

2025-05-21

Weaknesses

CWE-434

Affected products

• Zfile (Zfile)

References

• https://github.com/achiove/repdosenotexist/blob/main/request4cve.pdf