CVE-2022-2111

Unrestricted Upload of File with Dangerous Type in GitHub repository inventree/inventree prior to 0.7.2...

CVE-2022-2111 Unrestricted Upload of File with Dangerous Type in inventree/inventree

Unrestricted Upload of File with Dangerous Type in GitHub repository inventree/inventree prior to 0.7.2...

CVE-2022-2111

CVE-2022-2111 covers an unrestrictive file upload vulnerability in the InvenTree project (inventree/inventree) for versions prior to 0.7.2. The issue arises from insufficient validation of uploaded files, allowing an attacker to upload potentially dangerous files and, when opened, execute arbitra...