1. Home
  2. CVE Database
  3. CVE-2022-38484
HIGH · 8.8

CVE-2022-38484

An arbitrary file upload and directory traversal vulnerability exist in the file upload functionality of the System Setup menu in AgeVolt Portal prior to version 0.1. A remote authenticated attacker c...

Vulnerability Description

An arbitrary file upload and directory traversal vulnerability exist in the file upload functionality of the System Setup menu in AgeVolt Portal prior to version 0.1. A remote authenticated attacker could leverage this vulnerability to upload files to any location on the target operating system with web server privileges.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AgevoltAgevolt< 0.1

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2022-38484?

CVE-2022-38484 is a vulnerability with a CVSS score of 8.8 (HIGH). An arbitrary file upload and directory traversal vulnerability exist in the file upload functionality of the System Setup menu in AgeVolt Portal prior to version 0.1. A remote authenticated attacker c...

How severe is CVE-2022-38484?

CVE-2022-38484 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-38484?

Check the references section above for vendor advisories and patch information. Affected products include: Agevolt Agevolt.