PT-2021-19662
CVE-2021-32094
·
Published
2021-05-07
·
Updated
2021-05-12
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Emissary version 5.9.0
Description:
The issue allows an authenticated user to upload arbitrary files.
Recommendations:
For version 5.9.0, consider restricting file upload capabilities to authorized users as a temporary mitigation measure until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾