PT-2021-21293
CVE-2021-36581
·
تاريخ النشر
2021-09-14
·
تاريخ التحديث
2021-09-24
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Kooboo CMS version 2.1.1.0
Description
The issue allows for insecure file upload, enabling the upload of any file extension to the server. The server fails to verify the file extension, which was demonstrated by successfully uploading an aspx file.
Recommendations
For Kooboo CMS version 2.1.1.0, consider restricting file uploads to only necessary and verified extensions as a temporary workaround until a patch is available. Restrict access to the file upload functionality to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾