← All advisories

Critical severity9.8NVD Advisory· Published Apr 10, 2022· Updated Jun 17, 2026

CVE-2022-27477

CVE-2022-27477

Description

Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Newbee Ltd/Newbee Mall2 versions
cpe:2.3:a:newbee-mall_project:newbee-mall:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:newbee-mall_project:newbee-mall:1.0:*:*:*:*:*:*:*
- (no CPE)range: =1.0.0
Newbee-Mall/Newbee-Malldescription

Patches

Vulnerability mechanics

References

1

github.com/newbee-ltd/newbee-mall/issues/63nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.