Arbitrary File Upload Vulnerability in Snipe-IT by Snipe-IT Team
CVE-2022-32060
4.8MEDIUM
Key Information:
- Vendor
Snipeitapp
- Status
- Vendor
- CVE Published:
- 7 July 2022
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2022-32060?
An arbitrary file upload vulnerability has been identified in the Update Branding Settings component of Snipe-IT version 6.0.2. This flaw allows attackers to upload crafted files that can lead to the execution of arbitrary code, posing serious security risks. Implementing appropriate security measures is essential to mitigate potential exploits.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.