CVE-2019-17325

Name of the Vulnerable Software and Affected Versions ClipSoft REXPERT version 1.0.0.527 and earlier

Description The issue allows a remote attacker to upload arbitrary local files via the ActiveX method in RexViewerCtrl30.ocx, potentially leading to the disclosure of sensitive information. This can be exploited when a user visits a malicious web page, requiring user interaction.

Recommendations For ClipSoft REXPERT version 1.0.0.527 and earlier, consider disabling the ActiveX method in RexViewerCtrl30.ocx as a temporary workaround until a patch is available. Restrict access to the RexViewerCtrl30.ocx module to minimize the risk of exploitation.