exploitDog

CVE-2022-31366

Опубликовано: 20 окт. 2022

Источник: nvd

CVSS3: 7.2

EPSS Низкий

Описание

An arbitrary file upload vulnerability in the apiImportLabs function in api_labs.php of EVE-NG 2.0.3-112 Community allows attackers to execute arbitrary code via a crafted UNL file.

Ссылки

http://eve-ng.com
Vendor Advisory
https://erpaciocco.github.io/2022/eve-ng-rce/
Exploit
Third Party Advisory
http://eve-ng.com
Vendor Advisory
https://erpaciocco.github.io/2022/eve-ng-rce/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:eve-ng:eve-ng:2.0.3-112:*:*:*:community:*:*:*

EPSS

Процентиль: 80%

0.01363

Низкий

7.2 High

CVSS3

Дефекты

CWE-434

CWE-434

Связанные уязвимости

GHSA-8fqj-hqqp-j85q

CVSS3: 7.2

github

больше 3 лет назад

An arbitrary file upload vulnerability in the apiImportLabs function in api_labs.php of EVE-NG 2.0.3-112 Community allows attackers to execute arbitrary code via a crafted UNL file.

EPSS

Процентиль: 80%

0.01363

Низкий

7.2 High

CVSS3

Дефекты

CWE-434

CWE-434