PT-2021-24024
CVE-2021-44035
·
تاريخ النشر
2021-12-17
·
تاريخ التحديث
2021-12-22
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Wolters Kluwer TeamMate AM version 12.4 Update 1
Description:
The issue concerns the mishandling of attachment uploads, allowing an authenticated user to download and execute malicious files.
Recommendations:
For version 12.4 Update 1, consider restricting access to attachment uploads to minimize the risk of exploitation until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾