Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2022-23166

Sysaid – Sysaid Local File Inclusion (LFI)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCD

Description

Sysaid – Sysaid Local File Inclusion (LFI) – An unauthenticated attacker can access to the system by accessing to "/lib/tinymce/examples/index.html" path. in the "Insert/Edit Embedded Media" window Choose Type : iFrame and File/URL : [here is the LFI] Solution: Update to 22.2.20 cloud version, or to 22.1.64 on premise version.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SysAid Sysaid

  • 22.2.19 cloud version to ≤ 22.2.19affected

SysAid Sysaid

  • 22.1.63 on premise version to ≤ 22.1.63affected

References