CVE-2022-31366

An arbitrary file upload vulnerability in the apiImportLabs function in api_labs.php of EVE-NG 2.0.3-112 Community allows attackers to execute arbitrary code via a crafted UNL file.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2022-10-20

Last modified

2026-07-09

Weaknesses

CWE-434

Affected products

• Eve-ng (Eve-ng)

References

• https://erpaciocco.github.io/2022/eve-ng-rce/