CVE-2022-2419

Опубликовано: 15 июл. 2022

Источник: nvd

CVSS3: 8

EPSS Низкий

Описание

A vulnerability was found in URVE Web Manager. It has been declared as critical. This vulnerability affects unknown code of the file _internal/collector/upload.php. The manipulation leads to unrestricted upload. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used.

Ссылки

https://github.com/joinia/webray.com.cn/blob/main/URVE/URVE%20Web%20Manager%20upload.php%20File%20upload%20vulnerability.md
Exploit
Third Party Advisory
https://vuldb.com/?id.203902
Third Party Advisory
VDB Entry
https://github.com/joinia/webray.com.cn/blob/main/URVE/URVE%20Web%20Manager%20upload.php%20File%20upload%20vulnerability.md
Exploit
Third Party Advisory
https://vuldb.com/?id.203902
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:eveo:urve_web_manager:-:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01302

Низкий

8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

GHSA-q9gf-w74w-fcgj