What’s Vulnerable › Vulnerabilities

CVE-2022-40341

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-09-30 · updated 2026-07-09
• Weakness: CWE-434

Description

mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file.

Affected products

• Mojoportal: 2.7.0.0

References

• https://weed-1.gitbook.io/cve/mojoportal/upload-malicious-file-in-mojoportal-v2.7-cve-2022-40341
• https://weed-1.gitbook.io/cve/mojoportal/upload-malicious-file-in-mojoportal-v2.7-cve-2022-40341

Get alerted when CVE-2022-40341 or the next vulnerability affects your stack