CVE-2022-2111

CVE-2022-2111 is a critical vulnerability affecting Inventree versions prior to 0.7.2, allowing an authenticated attacker to upload dangerous file types without restriction. With a CVSS score of 8.8 (High), this flaw enables remote code execution and full compromise of the affected system due to its low attack complexity and lack of user interaction. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating potential interest from threat actors. Organizations using vulnerable Inventree versions should prioritize patching to mitigate this severe risk.