Auto Generated CVE annotations [Mon Sep 12 11:03:25 UTC 2022] 🤖

cves/2022/CVE-2022-37299.yaml

@@ -3,14 +3,19 @@ id: CVE-2022-37299
 info:
   name: Shirne CMS 1.2.0. - Path Traversal
   author: pikpikcu
-  severity: critical
+  severity: medium
   description: Shirne CMS 1.2.0 There is a Path Traversal vulnerability which could cause arbitrary file read via /static/ueditor/php/controller.php
   reference:
     - https://twitter.com/pikpikcu/status/1568316864690028544
     - https://nvd.nist.gov/vuln/detail/CVE-2022-37299
     - https://gitee.com/shirnecn/ShirneCMS/issues/I5JRHJ?from=project-issue
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
+    cvss-score: 6.5
+    cve-id: CVE-2022-37299
+    cwe-id: CWE-22
   metadata:
-    verified: true
+    verified: "true"
   tags: cve,cve2022,shirnecms,lfi
 
 requests: