Unrated severityNVD Advisory· Published May 12, 2022· Updated Sep 16, 2024
Sysaid – Sysaid Local File Inclusion (LFI)
CVE-2022-23166
Description
Sysaid – Sysaid Local File Inclusion (LFI) – An unauthenticated attacker can access to the system by accessing to "/lib/tinymce/examples/index.html" path. in the "Insert/Edit Embedded Media" window Choose Type : iFrame and File/URL : [here is the LFI] Solution: Update to 22.2.20 cloud version, or to 22.1.64 on premise version.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.gov.il/en/departments/faq/cve_advisoriesmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.