What is GHSA-65x8-9vgm-5fg5?

GHSA-65x8-9vgm-5fg5 is a security advisory published by GitHub Security Advisories with High severity. Feehi CMS arbitrary file upload vulnerability

Which CVE IDs does GHSA-65x8-9vgm-5fg5 cover?

GHSA-65x8-9vgm-5fg5 covers the following CVE IDs: CVE-2020-22643. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-65x8-9vgm-5fg5?

GHSA-65x8-9vgm-5fg5 has a CVSS v3 base score of 7.2, published by GitHub Security Advisories.

Which products are affected by GHSA-65x8-9vgm-5fg5?

GHSA-65x8-9vgm-5fg5 affects 1 product, including: composer/feehi/cms:\u003c= 2.1.0-beta.

GHSA-65x8-9vgm-5fg5HighCVSS 7.2

Feehi CMS arbitrary file upload vulnerability

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 7, 2023

🔗 CVE IDs covered (1)

CVE-2020-22643 →

📋 Description

Feehi CMS 2.1.0-beta is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files.

🎯 Affected products1

composer/feehi/cms:<= 2.1.0-beta

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2020-22643
https://github.com/liufee/cms/issues/51
https://github.com/advisories/GHSA-65x8-9vgm-5fg5