Critical severity9.8NVD Advisory· Published Aug 30, 2022· Updated Jun 17, 2026

CVE-2022-36749

Description

RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php. This vulnerability is exploited via a crafted payload injected into the file name of an uploaded file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Miczflor/Rpi Jukebox Rfidllm-fuzzy
Range: =2.3.0
Sourcefabric/Rpi Jukebox Rfid
cpe:2.3:a:sourcefabric:rpi-jukebox-rfid:2.3.0:*:*:*:*:*:*:*
RPi-Jukebox-RFID/RPi-Jukebox-RFIDcpe-rescue

Patches

Vulnerability mechanics

References

github.com/MiczFlor/RPi-Jukebox-RFID/issues/1859nvdExploitPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000