PT-2019-11678

CVE-2019-10276

·

Published

2019-03-29

·

Updated

2019-04-01

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Western Bridge Cobub Razor version 0.8.0
Description The issue concerns a file upload vulnerability. This vulnerability can be exploited via the "web/assets/swf/uploadify.php" URI. An example of exploitation involves uploading a .php file with the content type set to image/jpeg.
Recommendations For version 0.8.0, consider restricting access to the "web/assets/swf/uploadify.php" URI to prevent unauthorized file uploads until a fix is available. As a temporary workaround, monitor file uploads closely to detect and prevent potential malicious activity.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾