PT-2020-13283
CVE-2020-12837
·
تاريخ النشر
2020-09-24
·
تاريخ التحديث
2020-09-27
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
ismartgate PRO version 1.5.9
Description
The issue allows malicious file uploads through the form used for uploading images to garage doors, requiring the use of PNG magic bytes.
Recommendations
For ismartgate PRO version 1.5.9, consider restricting access to the image upload form until a fix is available, and ensure that all uploaded files are thoroughly validated to prevent malicious uploads.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾