Lucene search
HistorySep 20, 2022 - 5:15 p.m.
CVE-2022-38916
cve-2022-38916
file upload
vulnerability
pagekit 1.0.18
nvd
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
62.0%
A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files
Affected configurations
Node
pagekitpagekitMatch1.0.18
| CPE | Name | Operator | Version |
|---|---|---|---|
| pagekit:pagekit | pagekit | eq | 1.0.18 |
References
Social References
More
Related
cvelist
cvelist
CVE-2022-38916
2022-09-20 16:09:40
github
github
Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type
2022-09-21 00:00:39
veracode
veracode
Arbitrary File Upload
2022-09-22 07:49:50
nvd
nvd
CVE-2022-38916
2022-09-20 17:15:09
prion
prion
Unrestricted file upload
2022-09-20 17:15:00
osv
osv
Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type
2022-09-21 00:00:39
CVE-2022-38916
2022-09-20 17:15:09
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
62.0%
Related for CVE-2022-38916