CVE-2022-24247 - CVE House
Back to Database
Status published Medium CVE-2022-24247

RiteCMS version 3.1.0 and below suffers from an arbitrary file...

Vulnerability Description

RiteCMS version 3.1.0 and below suffers from an arbitrary file overwrite via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated attacker to overwrite any file in the web root (along with any other file on the server that the PHP process user has the proper permissions to write) resulting a remote code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-24247

Credits & Attribution

No credits recorded in the NVD database.

References

More from ritecms

View All →
CVE-2022-24248
RiteCMS version 3.1.0 and below suffers from an arbitrary file...
Medium 6.5
CVE-2021-46367
RiteCMS version 3.1.0 and below suffers from a remote code...
High 7.2
CVE-2020-23934
An issue was discovered in RiteCMS 2.2.1. An authenticated user...
High 8.8
CVE-2013-5317
Cross-site scripting (XSS) vulnerability in RiteCMS 1.0.0 allows remote authenticated...
Low 3.5
CVE-2013-5316
Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote...
Medium 6.8

Affected Vendor

Affected Software

ritecms
Vulnerable Versions:
0

Timeline

Official Publish: April 12th, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.