Lucene search
HistoryFeb 22, 2023 - 3:15 p.m.
CVE-2022-41217
cloudflow
unauthenticated file upload
cve-2022-41217
malicious files
proofscope built-in storage
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.1
Confidence
High
EPSS
0.002
Percentile
60.8%
Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage.
Affected configurations
Node
hybridsoftwarecloudflowRange2.0.0–2.3.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hybridsoftware | cloudflow | * | cpe:2.3:a:hybridsoftware:cloudflow:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-41217 Cloudflow - Unauthenticated file upload vulnerability
2023-02-22 14:42:25
cve
cve
CVE-2022-41217
2023-02-22 15:15:11
prion
prion
Unrestricted file upload
2023-02-22 15:15:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.1
Confidence
High
EPSS
0.002
Percentile
60.8%
Related for NVD:CVE-2022-41217