Published: 07/07/2022 Updated: 28/11/2022

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

CVSS v3 Base Score: 4.8 | Impact Score: 2.7 | Exploitability Score: 1.7

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows malicious users to execute arbitrary code via a crafted file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
snipeitapp snipe-it 6.0.2

An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file.

Snipe-IT Version v602 Vulnerability Explanation: An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v602 allows attackers to execute arbitrary code via a crafted file Attack Vectors: We found a vulnerability file upload, when we upload malicious file at Update Branding Settings page Payload : githubcom/bypazs/GrimTheRip

CWE-79 https://grimthereaperteam.medium.com/snipe-it-version-v6-0-2-file-upload-cross-site-scripting-b15becc1a5ea https://github.com/bypazs/CVE-2022-32060 https://nvd.nist.gov https://github.com/bypazs/CVE-2022-32060

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-32060

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect