Shirne CMS - LFI (CVE-2022-37299)
Description
An issue was discovered in Shirne CMS 1.2.0. There is a Path Traversal vulnerability which could cause arbitrary file read via /static/ueditor/php/controller.php
psychologyCrowdSec Analysis
CVE-2022-37299 is a vulnerability in Shirne CMS that allows attackers to perform path traversal and read arbitrary files by abusing a specific endpoint within the application.
CrowdSec has been tracking this vulnerability and its exploits since 16th of May 2024.
According to CrowdSec data, while opportunistic exploitation dominates, a portion of threat actors trying to exploit CVE-2022-37299 apply basic targeting methods such as port or service detection. This indicates emerging patterns of selective targeting. Telemetry from the CrowdSec network also shows that exploitation activity for CVE-2022-37299 remains steady week-over-week. Attack volumes are consistent with long-term trends, indicating sustained interest from threat actors. CVE-2022-37299 continues to be an active part of the threat landscape and will likely remain this way for the forseeable future.
Exploitation attempts typically involve requests to URLs containing /static/ueditor/php/controller.php.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2022-09-09 |
| Rule Released | 2024-05-16 |
| CrowdSec First Seen | 2024-11-23 |