CVE-2022-2111
- Source
- https://cve.org/CVERecord?id=CVE-2022-2111
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-2111.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-2111
- Aliases
- Published
- 2022-06-17T10:10:10Z
- Modified
- 2026-04-02T07:44:52.981110Z
- Severity
-
- 9.0 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- Unrestricted Upload of File with Dangerous Type in inventree/inventree
- Details
-
Unrestricted Upload of File with Dangerous Type in GitHub repository inventree/inventree prior to 0.7.2.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2111.json", "cna_assigner": "@huntrdev", "cwe_ids": [ "CWE-434" ] }- References
Affected packages
Git / github.com/inventree/inventree
Affected ranges
- Type
- GIT
- Repo
- https://github.com/inventree/inventree
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
0.*
0.0.10
0.0.11
0.0.12
0.0.3
0.0.6
0.0.8
0.0.9
0.1.0
0.1.1
0.1.2
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.10.0
0.10.1
0.11.0
0.11.1
0.11.2
0.11.3
0.12.0
0.12.1
0.12.10
0.12.2
0.12.3
0.12.4
0.12.5
0.12.6
0.12.7
0.12.8
0.12.9
0.13.0
0.13.1
0.13.2
0.13.3
0.13.4
0.13.5
0.13.6
0.14.0
0.14.1
0.14.2
0.14.3
0.14.4
0.14.5
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.15.8
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.16.5
0.16.6
0.16.7
0.16.8
0.16.9
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.2.0
0.2.1
0.2.2
0.2.3
0.2.4
0.3.0
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.5.0
0.5.1
0.5.2
0.5.3
0.5.4
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.7.0
0.7.1
0.8.0
0.8.1
0.8.2
0.8.3
0.8.4
0.9.0
0.9.1
0.9.2
1.*
1.0.0
1.0.0-rc0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.1.10
1.1.11
1.1.12
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
v0.*
v0.0.11
v0.0.5
v0.0.7
v0.1.3
v0.7.0