Lucene search

[email protected]NVD:CVE-2022-2418

HistoryJul 15, 2022 - 6:15 a.m.

CVE-2022-2418

2022-07-1506:15:07

CWE-434

[email protected]

web.nvd.nist.gov

urve web manager

critical vulnerability

file upload

kreator.html5

unrestricted

local network

exploit disclosed

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.8%

JSON

A vulnerability was found in URVE Web Manager. It has been classified as critical. This affects an unknown part of the file kreator.html5/img_upload.php. The manipulation leads to unrestricted upload. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used.

Affected configurations

Nvd

Node

eveourve_web_managerMatch-

VendorProductVersionCPE
eveourve_web_manager-cpe:2.3:a:eveo:urve_web_manager:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
eveo	urve_web_manager	-	cpe:2.3:a:eveo:urve_web_manager:-:::::::*

References

github.com/joinia/webray.com.cn/blob/main/URVE/URVE%20Web%20Manager%20img_upload.php%20File%20upload%20vulnerability.md

vuldb.com/?id.203901

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.8%

JSON

Related for NVD:CVE-2022-2418

cve1 cvelist1 prion1