CVE-2022-2418CWE-434

URVE Web Manager img_upload.php unrestricted upload

High · published July 15, 2022

CVSS v3.1
8.0
EPSS
1%
Percentile
66.6
In the wild
Unconfirmed
What it is

A vulnerability was found in URVE Web Manager. It has been classified as critical. This affects an unknown part of the file kreator.html5/img_upload.php. The manipulation leads to unrestricted upload. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01150 · 66.6th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2022-07-15T06:10Z
EPSS history
Timeline
  • 15 JUL 06:10Z
    URVE Web Manager img_upload.php unrestricted upload
    cvelistv5