CVE-2022-43234

CRITICAL CVSS: 9.8 Published: 2022-11-16 Modified: 2026-06-17

Description

An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file.

Affected Platforms

Hoosk Hoosk

Weakness Type

CWE-434, CWE-434

References