CVE-2022-28863

2023-07-2400:00:00

mitre

www.cve.org

nokia netact 22

authenticated user

dangerous files

site configuration tool

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

44.9%

JSON

An issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can visit the Site Configuration Tool section and arbitrarily upload potentially dangerous files without restrictions via the /netact/sct dir parameter in conjunction with the operation=upload value.