CVE-2016-5050

Name of the Vulnerable Software and Affected Versions ReadyDesk version 9.1

Description The issue allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file due to an unrestricted file upload vulnerability in the chat/sendfile.aspx endpoint.

Recommendations For ReadyDesk version 9.1, consider restricting access to the chat/sendfile.aspx endpoint to prevent arbitrary code execution until a patch is available. As a temporary workaround, restrict file uploads to only necessary file types to minimize the risk of exploitation.