CVE-2022-27262

CriticalCVSS 9.8

Published: 12/04/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.96%

78th percentile - higher than 78% of all known CVEs

An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file.

An attacker can upload a malicious file, potentially leading to server compromise and breach of data confidentiality, integrity, and availability.

Immediately update Skipper to the latest version and implement file type validation and size restrictions in the upload module.

Original NVD description (English source)

An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file.