PT-2015-7662
CVE-2015-7904
·
Publicado
2015-10-28
·
Atualizado
2015-10-28
Descrição por
CVSS 2.0
6.5
MédiaMétricasAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Infinite Automation Mango Automation versions 2.5.x through 2.6.x before 2.6.0 build 430
Description
The issue allows remote authenticated users to execute arbitrary JSP code via vectors involving an upload of an image file, specifically through an unrestricted file upload vulnerability.
Recommendations
For versions 2.5.x through 2.6.x before 2.6.0 build 430, update to version 2.6.0 build 430 or later to resolve the issue.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾