PT-2019-18692 · Prima Systems · Flexair
CVE-2019-7669
·
Publicado
2019-07-01
·
Atualizado
2022-10-21
CVSS v2.0
9.0
Alta
| Vetor | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Prima Systems FlexAir versions 2.3.38 and prior
Description
The issue is related to improper validation of file extensions when uploading files. This could allow a remote authenticated attacker to upload and execute malicious applications within the application's web root with root privileges.
Recommendations
For versions 2.3.38 and prior, update to a version that fixes the improper validation of file extensions to prevent malicious file uploads.
Exploit
Correção
Unrestricted File Upload
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Flexair