CVE-2022-2420CWE-434

URVE Web Manager uploader.php unrestricted upload

High · published July 15, 2022

CVSS v3.1
8.0
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

A vulnerability was found in URVE Web Manager. It has been rated as critical. This issue affects some unknown processing of the file _internal/uploader.php. The manipulation leads to unrestricted upload. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01127 · 66.1th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2022-07-15T06:10Z
EPSS history
Timeline
  • 15 JUL 06:10Z
    URVE Web Manager uploader.php unrestricted upload
    cvelistv5