PT-2015-7662
CVE-2015-7904
·
تاريخ النشر
2015-10-28
·
تاريخ التحديث
2015-10-28
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Infinite Automation Mango Automation versions 2.5.x through 2.6.x before 2.6.0 build 430
Description
The issue allows remote authenticated users to execute arbitrary JSP code via vectors involving an upload of an image file, specifically through an unrestricted file upload vulnerability.
Recommendations
For versions 2.5.x through 2.6.x before 2.6.0 build 430, update to version 2.6.0 build 430 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾