PT-2018-14957

CVE-2018-19423

·

Published

2018-11-21

·

Updated

2022-02-19

Description by

CVSS 3.1
7.2
High
MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Codiad version 2.8.4
Description The issue allows remote authenticated administrators to execute arbitrary code by uploading an executable file.
Recommendations For version 2.8.4, update to a newer version that contains a fix for this issue, or as a temporary workaround, consider restricting file upload capabilities to prevent the execution of arbitrary code.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-434: Unrestricted Upload of File with Dangerous Type
Related identifiers
CVE-2018-19423
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com