CVE-2022-0242

Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0...

CVE-2022-0242

Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0...

CVE-2022-0242

CVE-2022-0242 overview (supported by connected docs): An unrestricted upload of a dangerous file type in crater-invoice/crater prior to version 6.0 allows uploading arbitrary PHP code via the user avatar field, enabling remote code execution. PoC demonstrates uploading s.php and retrieving execut...