CVE-2019-10267

Name of the Vulnerable Software and Affected Versions Ahsay Cloud Backup Suite version 8.1.0.50

Description An issue was discovered that allows for insecure file upload and code execution. It is possible to upload a file into any directory of the server, including inserting a JSP shell into the web server's directory and executing it, leading to full access to the system as the configured user.

Recommendations For Ahsay Cloud Backup Suite version 8.1.0.50, consider restricting file upload capabilities to prevent malicious file uploads until a patch is available. As a temporary workaround, restrict access to sensitive directories on the server to minimize the risk of exploitation.