--- title: "CX-2023-5033" date: "2022-10-30T07:00:00+00:00" url: "https://checkmarx.com/zero/vulnerabilities/cx-2023-5033/" --- # CX-2023-5033 [Disclosed vulnerabilities](https://checkmarx.com/zero/vulnerabilities/) CVE-2022-44143 **Published:** Oct 30, 2022 5.8 Medium Severity arbitrary ASP.NET file nuget path traversal Write OR Ori Ron Reported by Checkmarx Zero Details Overview ## Summary A path traversal vulnerability leads to arbitrary file write ## Product nopCommerce version 4.50.3 and below ## Impact A remote attacker can craft a malicious request to upload his/her own avatar to the system, which may result in arbitrary file write, including overwriting existing files used by nopCommerce. The vulnerable endpoint relies on user-input to determine both the mime-type of the uploaded file, and the content of the file. The mime-type is set according to the Content-Type header, which is controlled by the attacker, and isn’t go through any sanitization or validation. Similarly, the content of the file is just the content of the multipart request, without any validation. ## Remediation Update nopCommerce to versions 4.60.4. ## Credit This issue was reported by \[Ori Ron\]([https://www.linkedin.com/in/ori-ron-40099912b/](https://www.linkedin.com/in/ori-ron-40099912b/) ## Resources 1. [d2f6214](https://github.com/nopSolutions/nopCommerce/commit/d2f62140e1ec251e81a9d4ec421fccd0b286620b) 0 Medium Severity CVSS v3.1 Score 5.8 CVSS v3.1 Vectors- Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Changed - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None Advisory Timeline1. Disclosed Oct 30, 2022 ## Explore more findings [27 Nov 2025 CVE-2025-34281 Stored Cross-Site Scripting (XSS) in ThingsBoard 6.2 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-34281/) [17 Jan 2025 CVE-2025-0825 HTTP Response Splitting in cpp-httplib 6.9 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-0825/) [17 Jun 2025 CVE-2025-6050 Stored Cross-Site Scripting (XSS) in Mezzanine CMS Admin Interface 4.8 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-6050/) [12 Dec 2024 CVE-2024-8374 Code Injection in UltiMaker Cura 7.8 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-8374/) [14 Nov 2024 CVE-2024-52526 Stored Cross-site Scripting in @LibreNMS/LibreNMS Services Tab 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-52526/) [14 Nov 2024 CVE-2024-51497 Stored Cross-site Scripting in @LibreNMS/LibreNMS Custom OID Tab 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51497/) [14 Nov 2024 CVE-2024-51496 Reflected Cross-site Scripting in @LibreNMS/LibreNMS /wireless and /health endpoints 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51496/) [ 14 Nov 2024 CVE-2024-51495 Stored Cross-site Scripting in @LibreNMS/LibreNMS Device Overview `overwrite\_ip` Field 7.5 Visit the page ](https://checkmarx.com/zero/vulnerabilities/cve-2024-51495/) [14 Nov 2024 CVE-2024-51494 Stored Cross-site Scripting in @LibreNMS/LibreNMS Port Settings 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51494/) [14 Nov 2024 CVE-2024-50352 Stored Cross-site Scripting in @LibreNMS/LibreNMS Services Section of Device Overview 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50352/) [14 Nov 2024 CVE-2024-50351 Reflected Cross-site Scripting in @LibreNMS/LibreNMS Logs Tab 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50351/) [14 Nov 2024 CVE-2024-50350 Stored Cross-site Scripting in @LibreNMS/LibreNMS Port Settings Port Group 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50350/)