CVE-2022-44136

Description

Zenario CMS 9.3.57186 is vulnerable to RCE.

How to fix CVE-2022-44136

To remediate CVE-2022-44136, upgrade the affected package to a fixed version below.

• Packagist/tribalsystems/zenario—upgrade to 9.0.57473 or later

Is CVE-2022-44136 being exploited?

Low — EPSS is 0.9%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 9.0.57473

CVSS scores

References (6)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2022-44136
• PATCHgithub.com/TribalSystems/Zenario
• WEBcom0t.github.io/zenar.io/2022/10/18/Unauthent-RCE-Zenar.io~9.3.html
• WEBgithub.com/TribalSystems/Zenario/commit/4f95a557af3c0b82e448a6ff8f4c167525972e4a