Lucene search
Veracode Vulnerability DatabaseVERACODE:36313HistoryJul 11, 2022 - 6:12 a.m.
Arbitrary File Upload
2022-07-1106:12:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.001 Low
EPSS
Percentile
22.0%
snipe/snipe-it is vulnerable to arbitrary file upload. The vulnerability exists in the store function in AcceptanceController.php due to improper validation of the update branding settings component, allowing an attacker to inject and execute arbitrary code through a maliciously crafted file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| snipe/snipe-it | le | v6.0.2 | |
| snipe/snipe-it | le | v6.0.2 |
Related
osv
osv
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings
2022-07-08 00:00:42
CVE-2022-32060
2022-07-07 23:15:07
cvelist
cvelist
CVE-2022-32060
2022-07-07 00:00:00
cve
cve
CVE-2022-32060
2022-07-07 23:15:07
prion
prion
Design/Logic Flaw
2022-07-07 23:15:00
nvd
nvd
CVE-2022-32060
2022-07-07 23:15:07
github
github