PT-2019-11678
CVE-2019-10276
·
تاريخ النشر
2019-03-29
·
تاريخ التحديث
2019-04-01
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Western Bridge Cobub Razor version 0.8.0
Description
The issue concerns a file upload vulnerability. This vulnerability can be exploited via the "web/assets/swf/uploadify.php" URI. An example of exploitation involves uploading a .php file with the
content type set to image/jpeg.Recommendations
For version 0.8.0, consider restricting access to the "web/assets/swf/uploadify.php" URI to prevent unauthorized file uploads until a fix is available. As a temporary workaround, monitor file uploads closely to detect and prevent potential malicious activity.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾