CVE-2022-45052

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-45052
A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user input on the url parameter on the Proxy.type.php endpoint, external users are capable of accessing files on the server.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://csirt.divd.nl/CVE-2022-45052/ Third Party Advisory
https://csirt.divd.nl/DIVD-2022-00064/ Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:axiell:iguana:*:*:*:*:*:*:*:*
OR cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
History

02 Jan 2024, 19:15

Type Values Removed Values Added
Summary (en) A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user input on the url parameter on the Proxy.type.php endpoint, external users are capable of accessing files on the server.  (en) A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user input on the url parameter on the Proxy.type.php endpoint, external users are capable of accessing files on the server.

07 Nov 2023, 03:54

Type Values Removed Values Added
Summary A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user input on the url parameter on the Proxy.type.php endpoint, external users are capable of accessing files on the server. A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user input on the url parameter on the Proxy.type.php endpoint, external users are capable of accessing files on the server. 

11 Jan 2023, 03:08

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
First Time Microsoft windows
Axiell
Microsoft
Axiell iguana
Linux
Linux linux Kernel
References (MISC) https://csirt.divd.nl/DIVD-2022-00064/ - (MISC) https://csirt.divd.nl/DIVD-2022-00064/ - Third Party Advisory
References (MISC) https://csirt.divd.nl/CVE-2022-45052/ - (MISC) https://csirt.divd.nl/CVE-2022-45052/ - Third Party Advisory
CWE CWE-552
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:a:axiell:iguana:*:*:*:*:*:*:*:*

06 Jan 2023, 16:15

Type Values Removed Values Added
Summary A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user input on the url parameter on the imageProxy.type.php endpoint, external users are capable of accessing files on the server. A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user input on the url parameter on the Proxy.type.php endpoint, external users are capable of accessing files on the server.
References
  • (MISC) https://csirt.divd.nl/DIVD-2022-00064/ -

04 Jan 2023, 19:43

Type Values Removed Values Added
New CVE
Information

Published : 2023-01-04 19:15

Updated : 2024-01-02 19:15

NVD link : CVE-2022-45052

Mitre link : CVE-2022-45052

CVE.ORG link : CVE-2022-45052

JSON object : View

Products Affected

axiell

  • iguana

microsoft

  • windows

linux

  • linux_kernel
CWE
CWE-552

Files or Directories Accessible to External Parties