Command injection

2022-08-3022:15:00

PRIOn knowledge base

www.prio-n.com

0.003 Low

EPSS

Percentile

66.0%

JSON

RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php. This vulnerability is exploited via a crafted payload injected into the file name of an uploaded file.

CPENameOperatorVersion
rpi-jukebox-rfideq2.3.0

CPE	Name	Operator	Version
	rpi-jukebox-rfid	eq	2.3.0

References

github.com/MiczFlor/RPi-Jukebox-RFID/issues/1859

0.003 Low

EPSS

Percentile

66.0%

JSON

Related for PRION:CVE-2022-36749