CVE-2022-45338

CVSS V2 None CVSS V3 None
Description
An arbitrary file upload vulnerability in the profile picture upload function of Exact Synergy Enterprise 267 before 267SP13 and Exact Synergy Enterprise 500 before 500SP6 allows attackers to execute arbitrary code via a crafted SVG file.
Overview
  • CVE ID
  • CVE-2022-45338
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-15T23:15:10
  • Last Modified Date
  • 2022-12-21T14:20:14
Weakness Enumerations
CWE URL
CWE-434 http://cwe.mitre.org/data/definitions/434.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:exactsoftware:exact_synergy:267:-:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:267:sp1:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:267:sp10:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:267:sp11:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:267:sp12:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:267:sp2:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:267:sp3:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:267:sp4:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:267:sp5:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:267:sp6:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:267:sp7:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:267:sp8:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:267:sp9:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:500:-:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:500:sp1:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:500:sp2:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:500:sp3:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:500:sp4:*:*:enterprise:*:*:* 1 OR
cpe:2.3:a:exactsoftware:exact_synergy:500:sp5:*:*:enterprise:*:*:* 1 OR
References
Reference URL Reference Tags
https://gist.github.com/MaxRozendaal/633b34a4675b60caed736e5ffe28f272
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-45338
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45338
History
Created Old Value New Value Data Type Notes
2022-12-16 00:16:02 Added to TrackCVE
2022-12-18 09:30:25 2022-12-15T23:15:10.407 2022-12-15T23:15:10 CVE Published Date updated
2022-12-18 09:30:25 2022-12-16T12:57:36 CVE Modified Date updated
2022-12-18 09:30:25 Received Awaiting Analysis Vulnerability Status updated
2022-12-19 16:16:13 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2022-12-21 15:15:15 2022-12-21T14:20:14 CVE Modified Date updated
2022-12-21 15:15:15 Undergoing Analysis Analyzed Vulnerability Status updated
2022-12-21 15:15:15 Weakness Enumeration new
2022-12-21 15:15:17 CPE Information updated