CVE-2022-24251

Published Mar 1, 2022·Updated Jul 5, 2026

NVD Description

Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the Catalog Asset Upload function.

Public Exploits & PoCs1 found

[POC] CVE-2022-24251 — extensis_portfolio_rce_CVE-2022-24251

Authenticated Remote Code Execution proof-of-concept for Extensis Portfolio Server CVE-2022-24251. Valid for version 4.0.1 or previous and bypasses the "fix" they implemented in 4.0.1.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free