CVE-2022-3552

Unrestricted Upload of File with Dangerous Type in GitHub repository boxbilling/boxbilling prior to 0.0.1.

CVSS v3.1

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v3.0

7.2 HIGHCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

44.00% chance of exploitation in the next 30 days, 99th percentile

Published

2022-10-17

Updated

2025-05-12

Proof-of-concept exploits (4)

• https://huntr.dev/bounties/c6e2973d-386d-4667-9426-10d10828539b
• 0xk4b1r/CVE-2022-35528★ · 2023-04-01
• BakalMode/CVE-2022-35522★ · 2025-04-27
• kabir0x23/CVE-2022-35528★ · 2023-04-01

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51108

References

• CVE Record
• NVD entry

Related

• CVE-2022-35519
• CVE-2022-35520
• CVE-2022-35518
• CVE-2022-35521
• CVE-2022-35517
• CVE-2022-35522