← Database

CVE-2022-31366

HIGH CVSS: 7.2 Published: 2022-10-20 Modified: 2026-07-09

Description

An arbitrary file upload vulnerability in the apiImportLabs function in api_labs.php of EVE-NG 2.0.3-112 Community allows attackers to execute arbitrary code via a crafted UNL file.

Affected Platforms

Eve-Ng Eve-Ng

Weakness Type

CWE-434, CWE-434

References