CVE-2022-1033

2022-03-2308:15:08

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%

JSON

Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.6.

CPENameOperatorVersion
cratereq2.1.0
cratereq5.0.5
cratereq6.0.3
cratereq3.0.0
cratereq6.0.0
cratereq4.2.0
cratereq1.1.0
cratereq5.0.6
cratereq4.0.3
cratereq2.0.2

Name	Operator	Version
crater	eq	2.1.0
crater	eq	5.0.5
crater	eq	6.0.3
crater	eq	3.0.0
crater	eq	6.0.0
crater	eq	4.2.0
crater	eq	1.1.0
crater	eq	5.0.6
crater	eq	4.0.3
crater	eq	2.0.2

Rows per page:

1-10 of 301

References

github.com/crater-invoice/crater/commit/88035ea49082f7053a37ef07bf3587e09d9d22b4

huntr.dev/bounties/4d7d4fc9-e0cf-42d3-b89c-6ea57a769045