CVE-2022-3944 - jerryhanjj ERP Commodity Management inventory.php uploadImages unrestricted upload · CoreCVE

Back Back to CVE browser

HIGH

jerryhanjj ERP Commodity Management inventory.php uploadImages unrestricted upload

Published Nov 11, 2022

8.8

HIGH

CVSS 3.1

EPSS 0.49%

Description

A vulnerability was found in jerryhanjj ERP. It has been declared as critical. Affected by this vulnerability is the function uploadImages of the file application/controllers/basedata/inventory.php of the component Commodity Management. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-213451.

Affected products

Vendor Jerryhanjj Product ERP Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-266

Incorrect Privilege Assignment

CWE-434

Unrestricted Upload of File

References (2)

https://github.com/jerryhanjj/ERP/issues/3
ExploitIssue TrackingThird Party Advisory
https://vuldb.com/?id.213451
Third Party Advisory

Link	Providers	Tags
https://github.com/jerryhanjj/ERP/issues/3		ExploitIssue TrackingThird Party Advisory
https://vuldb.com/?id.213451		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Nov 11, 2022

Updated Apr 15, 2025

Reserved Nov 11, 2022

Link CVE-2022-3944

CISA Vulnrichment

Updated Apr 14, 2025

Status Modified

Modified Jun 17, 2026

Link CVE-2022-3944

Severity n/a

Public date n/a

Links CVE-2022-3944