Lucene search
Veracode Vulnerability DatabaseVERACODE:37266HistorySep 26, 2022 - 7:39 a.m.
Arbitrary File Upload
2022-09-2607:39:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
octoprint vulnerability software misconfiguration file upload attacker extension
EPSS
0.001
Percentile
21.4%
octoprint is vulnerable to arbitrary file upload. The vulnerability exists due to misconfiguration in move file functionality which allows an attacker to upload malicious files and change the file extension of the uploaded files.
Related
cvelist
cvelist
huntr
huntr
Unrestricted File Upload Allowed due to Flawed Move File Functionality
2022-08-15 20:09:29
github
github
OctoPrint vulnerable to Unrestricted Upload of File with Dangerous Type
2022-09-22 00:00:32
nvd
nvd
CVE-2022-2872
2022-09-21 10:15:09
osv
osv
CVE-2022-2872
2022-09-21 10:15:09
PYSEC-2022-286
2022-09-21 10:15:00
OctoPrint vulnerable to Unrestricted Upload of File with Dangerous Type
2022-09-22 00:00:32
prion
prion
Unrestricted file upload
2022-09-21 10:15:00
cve
cve
CVE-2022-2872
2022-09-21 10:15:09