CVE-2022-47186 HIGH

CVE-2022-47186: Unrestricted Upload of File vulnerability in Generex CS141

Vendor Generex

Product UPS CS141

Weakness CWE-434 · Unrestricted file upload

Published September 28, 2023

Last update September 23, 2024

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

What the vulnerability does

01Description

There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version. An attacker could upload and/or delete any type of file, without any format restriction and without any authentication, in the "upload" directory.

Key dates

02Disclosure timeline

September 28, 2023 CVE published

September 23, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-47186 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/434.html

Related vulnerabilities

04Related CVE

CVE-2026-1107 EyouCMS Member Avatar Diyajax.php check_userinfo unrestricted upload CVE-2025-3040 Project Worlds Online Time Table Generator add_student.php unrestricted upload CVE-2025-7864 thinkgem JeeSite FileUploadController.java upload unrestricted upload CVE-2025-35032 Medical Informatics Engineering Enterprise Health arbitrary file upload CVE-2023-6925 Unlimited Addons for WPBakery Page Builder <= 1.0.42 - Authenticated (Editor+) Arbitrary File Upload