What is CVE-2022-2419?

CVE-2022-2419 is a high-severity vulnerability in Eveo Urve Web Manager, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 8.0/10. Published 2022-07-15.

How severe is CVE-2022-2419?

High severity. CVSS v3 base score is 8.0 out of 10.

Arbitrary file upload in Eveo Urve Web Manager

CVE-2022-2419

A vulnerability was found in URVE Web Manager. It has been declared as critical. This vulnerability affects unknown code of the file _internal/collector/upload.php. The manipulation leads to unrestricted upload. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used.

Vulnerability class: Unrestricted File Upload

EPSS: 0.128 (95.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Eveo Urve_web_manager
Urve Web Manager — versions n/a

Weakness classification (CWE)

CWE-434 — Unrestricted Upload of File with Dangerous Type

References

cna@vuldb.com (Exploit, Third Party Advisory, x_refsource_MISC)
cna@vuldb.com (VDB Entry, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-2419?: CVE-2022-2419 is a high-severity vulnerability in Eveo Urve Web Manager, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 8.0/10. Published 2022-07-15.
How severe is CVE-2022-2419?: High severity. CVSS v3 base score is 8.0 out of 10.