CVE-2022-2647

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-205594 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published: Aug 4, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-264706.7In aie, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with Syst CVE-2022-264717.8In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege CVE-2022-264727.8In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with n CVE-2022-264736.7In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execut CVE-2022-264746.7In sensorhub, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of CVE-2022-264756.7In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2022-264768.8A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS), S CVE-2022-264777.5The Security Team noticed that the termination condition of the for loop in the readExternal method is a controllable variable, which, if ta CVE-2022-264799.8An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file (which can be created via an rsync backdoor CVE-2022-26489.8A vulnerability was found in SourceCodester Multi Language Hotel Management Software. It has been rated as critical. This issue affects some CVE-2022-264818.8An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request (C CVE-2022-264827.2An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin.