CVE-2022-31366

CVE-2022-31366 affects EVE-NG Community 2.0.3-112. The vulnerability is an arbitrary file upload in the function apiImportLabs inside api_labs.php, enabling an attacker to execute arbitrary code by supplying a crafted UNL file. The Red Hat, NVD, CVE records and related sources confirm the issue a...