Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-58958
HistoryJun 21, 2022 - 12:00 a.m.

InvenTree file upload vulnerability

2022-06-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

0.001 Low

EPSS

Percentile

41.1%

InvenTree is an open source inventory management system from InvenTree open source. A file upload vulnerability exists in versions prior to InvenTree 0.7.2, which stems from the lack of validation of uploaded files by the application. An attacker could exploit the vulnerability to upload malicious files to remotely execute arbitrary code.

CPENameOperatorVersion
inventree inventreelt0.7.2

0.001 Low

EPSS

Percentile

41.1%

Related for CNVD-2022-58958