CVE-2022-45052

HIGH

Axiell Iguana CMS 4.0.0-4.5.02 - Local File Inclusion via Proxy.type.php URL Parameter

Title source: llm
STIX 2.1

Description

A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user input on the url parameter on the Proxy.type.php endpoint, external users are capable of accessing files on the server.

References (2)

Core 2
Core References
Third Party Advisory third-party-advisory
https://csirt.divd.nl/CVE-2022-45052/
Third Party Advisory third-party-advisory
https://csirt.divd.nl/DIVD-2022-00064/

Scores

CVSS v3 8.8
EPSS 0.0072
EPSS Percentile 48.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-552
Status published
Products (1)
axiell/iguana 4.0.0 - 4.5.02
Published Jan 04, 2023
Tracked Since Feb 18, 2026