CVE-2022-42458

CRITICAL · CVSS 9.8 EPSS 1.08%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-12-07 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-42458

Severity

CRITICAL

CVSS

9.8

EPSS

1.08%

Original NVD Description

Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a remote unauthenticated attacker to upload an arbitrary file. As a result, an arbitrary script may be executed and/or a file may be altered.