CVE-2022-29307
Published: 12 May 2022
Summary
CVE-2022-29307 is a critical-severity Code Injection (CWE-94) vulnerability in Ionizecms Ionize. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 8.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
IonizeCMS version 1.0.8.1 contains a command injection vulnerability in the copy_lang_content function located in application/models/lang_model.php. The flaw is tracked as CVE-2022-29307 with a CVSS 3.1 base score of 9.8 and is classified under CWE-94. The affected component allows unsanitized input to reach operating-system command execution paths within the content-management system.
Because the vulnerability is reachable over the network without authentication or user interaction, an unauthenticated remote attacker can supply crafted input that results in arbitrary command execution on the underlying server. Successful exploitation grants the attacker full control over confidentiality, integrity, and availability of the application and host.
Public references point to GitHub issue 405 in the ionize/ionize repository, which documents the discovery but provides no official patch or mitigation guidance in the supplied references. The associated EPSS score remains flat at 0.0667 with no material increase after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-33649
Vulnerability details
IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in application/models/lang_model.php.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Makes persistent code injection into loaded programs impossible when the executable image itself resides on hardware-protected read-only media.
Dynamically generated code can be produced and executed inside the isolated chamber, preventing host compromise from code-injection payloads.
Validates inputs used in dynamic code generation to block injected directives.
Directly prevents execution of attacker-supplied code written into data memory regions.