CVE-2022-31366: Eve-NG

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in the apiImportLabs function in api_labs.php of EVE-NG 2.0.3-112 Community allows attackers to execute arbitrary code via a crafted UNL file.

Affected products

• Eve-NG Eve-NG: version 2.0.3-112 only

Published 2022-10-20. Last modified 2026-07-09.