PT-2023-16124 · Uvdesk · Uvdesk
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Uvdesk version 1.1.1
Description
The issue allows an authenticated remote attacker to execute commands on the server due to improper validation of profile pictures uploaded by customers.
Recommendations
For Uvdesk version 1.1.1, consider disabling the profile picture upload feature until a patch is available to prevent command execution on the server. Restrict access to the server to minimize the risk of exploitation.
Exploit
Correção
Unrestricted File Upload
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Uvdesk