← All advisories

Critical severity9.8NVD Advisory· Published Jul 5, 2022· Updated Jun 17, 2026

CVE-2022-32413

CVE-2022-32413

Description

An arbitrary file upload vulnerability in Dice v4.2.0 allows attackers to execute arbitrary code via a crafted file.

Affected products

3

Dice Project/Dice
cpe:2.3:a:dice_project:dice:4.2.0:*:*:*:*:*:*:*
Dice/Dicedescription
Bihell/Dicellm-fuzzy
Range: =4.2.0

Patches

Vulnerability mechanics

References

1

github.com/bihell/Dice/issues/157nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.