Vulnerability Details CVE-2022-36749
RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php. This vulnerability is exploited via a crafted payload injected into the file name of an uploaded file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.102
EPSS Ranking 92.8%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2022-36749
-
cpe:2.3:a:sourcefabric:rpi-jukebox-rfid:2.3.0