CVE-2022-34919: Zengenti Contensis

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The file upload wizard in Zengenti Contensis Classic before 15.2.1.79 does not correctly check that a user has authenticated. By uploading a crafted aspx file, it is possible to execute arbitrary commands.

Affected products

• Zengenti Contensis: before 15.2.1.79 (fixed in 15.2.1.79)

Published 2022-08-23. Last modified 2026-06-17.