Skip to main content

Ampache CVE-2022-4665

HIGH
Unrestricted Upload of File with Dangerous Type (CWE-434)
2022-12-23 security@huntr.dev
File Upload Ampache
8.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.8 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Dec 23, 2022 - 01:15 nvd
HIGH 8.8

DescriptionNVD

Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6.

AnalysisAI

Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified as Unrestricted File Upload (CWE-434), which allows attackers to upload malicious files that can be executed on the server. Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6. Affected products include: Ampache. Version information: prior to 5.5.6..

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Validate file types server-side, store uploads outside webroot, use random filenames, scan for malware.

More in Ampache

View all
CVE-2024-51490 CRITICAL POC
9.0 Nov 11

Ampache is a web based audio/video streaming application and file manager. Rated critical severity (CVSS 9.0), this vuln
CVE-2023-0771 HIGH POC
8.8 Feb 10

SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop. Rated high severity (CVSS 8.8), this vulnerab
CVE-2019-12385 HIGH POC
8.8 Aug 22

An issue was discovered in Ampache through 3.9.1. Rated high severity (CVSS 8.8), this vulnerability is remotely exploit
CVE-2024-51486 HIGH POC
8.4 Nov 11

Ampache is a web based audio/video streaming application and file manager. Rated high severity (CVSS 8.4), this vulnerab
CVE-2021-21399 HIGH POC
7.5 Apr 13

Ampache is a web based audio/video streaming application and file manager. Rated high severity (CVSS 7.5), this vulnerab
CVE-2024-47828 MEDIUM POC
6.5 Oct 09

ampache is a web based audio/video streaming application and file manager. Rated medium severity (CVSS 6.5), this vulner
CVE-2024-28852 MEDIUM POC
6.1 Mar 27

Ampache is a web based audio/video streaming application and file manager. Rated medium severity (CVSS 6.1), this vulner
CVE-2023-0606 MEDIUM POC
6.1 Feb 01

Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7. Rated medium severity (CVSS

CVE-2024-41665 MEDIUM POC
5.4 Jul 23

Ampache, a web based audio/video streaming application and file manager, has a stored cross-site scripting (XSS) vulnera
CVE-2019-12386 MEDIUM POC
5.4 Aug 22

An issue was discovered in Ampache through 3.9.1. Rated medium severity (CVSS 5.4), this vulnerability is remotely explo
CVE-2024-51489 MEDIUM POC
5.3 Nov 11

Ampache is a web based audio/video streaming application and file manager. Rated medium severity (CVSS 5.3), this vulner
CVE-2024-51488 MEDIUM POC
5.3 Nov 11

Ampache is a web based audio/video streaming application and file manager. Rated medium severity (CVSS 5.3), this vulner

Same weakness CWE-434 – Unrestricted Upload of File with Dangerous Type

View all
CVE-2016-3088 CRITICAL POC
9.8
CVE-2021-31207 MEDIUM POC
6.6
CVE-2017-12617 HIGH POC
8.1
CVE-2017-11357 CRITICAL POC
9.8
CVE-2017-12615 HIGH POC
8.1
CVE-2024-5084 CRITICAL POC
9.8
CVE-2020-36847 CRITICAL POC
9.8
CVE-2017-6090 HIGH POC
8.8

Same technique File Upload

View all
CVE-2016-3088 CRITICAL POC
9.8
CVE-2017-12617 HIGH POC
8.1
CVE-2017-11357 CRITICAL POC
9.8
CVE-2017-12615 HIGH POC
8.1
CVE-2024-5084 CRITICAL POC
9.8
CVE-2016-6600 CRITICAL POC
9.8
CVE-2017-6090 HIGH POC
8.8
CVE-2015-8249 CRITICAL POC
9.8

Share

CVE-2022-4665 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy