← All advisories

High severity7.2NVD Advisory· Published Oct 17, 2022· Updated Jun 17, 2026

CVE-2022-3552

CVE-2022-3552

Description

Unrestricted Upload of File with Dangerous Type in GitHub repository boxbilling/boxbilling prior to 0.0.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

boxbilling/boxbillingcpe-rescue3 versions
unspecified+ 2 more
- (no CPE)range: unspecified
- cpe:2.3:a:boxbilling:boxbilling:*:*:*:*:*:*:*:*range: <0.0.1
- (no CPE)range: 4.22.1.5
GitHub/boxbilling/boxbillingllm-create
Range: <0.0.1

Patches

Vulnerability mechanics

References

3

huntr.dev/bounties/c6e2973d-386d-4667-9426-10d10828539bnvdExploitPatchThird Party Advisory
github.com/boxbilling/boxbilling/commit/b6705995785eaa8653e876318c9b3d82060dc945nvdThird Party Advisory
packetstormsecurity.com/files/171542/BoxBilling-4.22.1.5-Remote-Code-Execution.htmlnvd

News mentions

0

No linked articles in our index yet.