What’s Vulnerable › Vulnerabilities

CVE-2022-25401

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-02-24 · updated 2026-06-17

Description

The copy function of the file manager in Cuppa CMS v1.0 allows any file to be copied to the current directory, granting attackers read access to arbitrary files.

Affected products

• Cuppacms: 1.0

References

• https://github.com/dota-st/Vulnerability/blob/master/CuppaCMS/CuppaCMS_second.md
• https://github.com/dota-st/Vulnerability/blob/master/CuppaCMS/CuppaCMS_second.md

Get alerted when CVE-2022-25401 or the next vulnerability affects your stack