CVE-2022-29637: Iminho Mindoc

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file.

Affected products

• Iminho Mindoc: version 2.1 only

Published 2022-05-26. Last modified 2026-06-17.