CVE-2022-44136: Remote Code Execution (RCE) in Zenario CMS
Summary
CVE-2022-44136: Zenario CMS is vulnerable to Remote Code Execution (RCE). Affects tribalsystems/zenario versions < 9.0.57473. Fixed in 9.0.57473. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Zenario CMS is a content management system that allows users to create and manage websites. It provides various features such as content editing, user management, and template customization. The vulnerability identified as CVE-2022-44136 affects Zenario CMS version 9.3.57186.
Vulnerability Detail
The vulnerability in Zenario CMS version 9.3.57186 allows for remote code execution (RCE). An attacker can exploit this vulnerability to execute arbitrary code on the affected system, potentially leading to unauthorized access, data manipulation, or further compromise of the system. The vulnerability has a CVSS score of 9.8, indicating its critical severity.
How To Fix
Minimum fixed version
9.0.57473
This is the first release that contains the fix.
composer require tribalsystems/zenario:9.0.57473Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Zenario CMS version 9.3.57186 is vulnerable to remote code execution (RCE). Users of Zenario CMS should upgrade to version 9.0.57473 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for tribalsystems/zenario →
FAQ
Zenario CMS is a content management system that allows users to create and manage websites. It provides various features such as content editing, user management, and template customization.
The vulnerability allows for remote code execution, which can lead to unauthorized access, data manipulation, or further compromise of the affected system.
The CVSS score of this vulnerability is 9.8, indicating its critical severity.
To fix this vulnerability, it is recommended to upgrade Zenario CMS to version 9.0.57473 or later.
No workaround is available for this vulnerability. It is necessary to upgrade to the patched version.
Related vulnerabilities
Recent vulnerabilities recorded for tribalsystems/zenario.
