PT-2022-15907

Name of the Vulnerable Software and Affected Versions NUUO NVRmini2 versions 3.11 and earlier Description The issue allows an unauthenticated attacker to upload an encrypted TAR archive. This can be abused to add arbitrary users due to the lack of authentication in handle import user.php. When...