{"id":"CVE-2022-4665","aliases":["EUVD-2022-51989","GHSA-w47p-6xf6-x3pf","UBUNTU-CVE-2022-4665"],"status":"published","title":"Unrestricted Upload of File with Dangerous Type in ampache/ampache","description":"Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6.","severity":{"version":"3.0","score":3.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00809,"percentile":0.57147,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-434"],"published":"2022-12-23T00:00:00Z","modified":"2026-10-28T02:30:59Z","affected":[{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ampache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6-rzb2779+dfsg-0ubuntu5","3.6-rzb2779+dfsg-0ubuntu6","3.6-rzb2779+dfsg-0ubuntu7","3.6-rzb2779+dfsg-0ubuntu8","3.6-rzb2779+dfsg-0ubuntu9","3.6-rzb2779+dfsg-0ubuntu9.1","3.6-rzb2779+dfsg-0ubuntu9.2"]}],"products":[{"vendor":"ampache","product":"ampache"},{"vendor":"ampache","product":"ampache/ampache"}],"references":[{"url":"https://huntr.dev/bounties/5e7f3ecc-3b08-4e0e-8bf8-ae7ae229941f","tags":["x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","web","report"]},{"url":"https://github.com/ampache/ampache/commit/8293fa86e5f50a168b7f5c892ffbd6aa555134bd","tags":["x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4665","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-w47p-6xf6-x3pf"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4665.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-4665","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4665","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-4665","title":"Unrestricted Upload of File with Dangerous Type in ampache/ampache","description":"Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6.","status":"published","published":"2022-12-23T00:00:00Z","modified":"2025-04-09T18:51:04.931Z","cvss":[{"version":"3.0","score":3.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:34:37.932195Z"}],"euvd":[{"id":"EUVD-2022-51989","description":"Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6.","status":"published","published":"2022-12-23T00:00:00Z","modified":"2025-04-09T18:51:04Z","cvss":[{"version":"3.0","score":3.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T20:52:37.733624Z"}],"ghsa":[{"id":"GHSA-w47p-6xf6-x3pf","title":"Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6.","description":"Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6.","status":"published","published":"2022-12-23T03:30:35Z","modified":"2023-01-30T05:06:52Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:47:34.932935Z"}],"nvd":[{"id":"CVE-2022-4665","description":"Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6.","status":"published","published":"2022-12-23T01:15:10.013Z","modified":"2026-06-17T05:21:30.17Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":3.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:07:34.388163Z"}],"osv":[{"id":"CVE-2022-4665","title":"Unrestricted Upload of File with Dangerous Type in ampache/ampache","description":"Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6.","status":"published","published":"2022-12-23T00:00:00Z","modified":"2026-10-28T02:30:59.149761228Z","cvss":[{"version":"3.0","score":3.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T15:44:27.481647Z"},{"id":"UBUNTU-CVE-2022-4665","description":"Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6.","status":"published","published":"2022-12-23T01:15:00Z","modified":"2025-10-24T04:53:18Z","cvss":[{"version":"3.0","score":3.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:56.473586Z"}]}}