CVE-2022-34919

9.8 criticalEPSS 1.8%

Critical (9.8) in zengenti contensis. EPSS 1.8% chance of exploitation in the next 30 days.

The file upload wizard in Zengenti Contensis Classic before 15.2.1.79 does not correctly check that a user has authenticated. By uploading a crafted aspx file, it is possible to execute arbitrary commands.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-11-01)
CWE: CWE-287
Published: 2022-08-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zengenti:contensis

References

https://github.com/ahajnik/CVE-2022-34919
https://www.zengenti.com/
https://github.com/ahajnik/CVE-2022-34919
https://www.zengenti.com/

Check your stack JSON