PT-2022-20718
CVE-2022-31366
·
تاريخ النشر
2022-10-20
·
تاريخ التحديث
2025-05-08
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
EVE-NG version 2.0.3-112 Community
Description
The issue is related to an arbitrary file upload vulnerability in the
apiImportLabs function within api labs.php. This vulnerability allows attackers to execute arbitrary code by uploading a crafted UNL file.Recommendations
For EVE-NG version 2.0.3-112 Community, consider disabling the
apiImportLabs function in api labs.php as a temporary workaround to prevent exploitation until a patch is available. Restrict access to the api labs.php file to minimize the risk of arbitrary code execution. Avoid using the apiImportLabs function until the issue is resolved.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾