Sourcefabric: >> Rpi-Jukebox-Rfid >> 2.3.0 Security Vulnerabilities
RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php. This vulnerability is exploited via a crafted payload injected into the file name of an uploaded file.
CVSS Score
9.8
EPSS Score
0.102
Published
2022-08-30