CVE-2022-45052

Published: Jan 4, 2023Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user input on the url parameter on the Proxy.type.php endpoint, external users are capable of accessing files on the server.

Affected (1)

Products: Axiell: Iguana

Axiell

1 product

Iguana

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Axiell Iguana	From 4.0.0 to 4.5.02

Running on/with	Platform Versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

Related CWEs

CWE-552

Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (4)

https://csirt.divd.nl/CVE-2022-45052/

Source: csirt@divd.nl

Third Party Advisory

https://csirt.divd.nl/DIVD-2022-00064/

Source: csirt@divd.nl

Third Party Advisory

https://csirt.divd.nl/CVE-2022-45052/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://csirt.divd.nl/DIVD-2022-00064/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.