PT-2021-24024
CVE-2021-44035
·
Published
2021-12-17
·
Updated
2021-12-22
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Wolters Kluwer TeamMate AM version 12.4 Update 1
Description:
The issue concerns the mishandling of attachment uploads, allowing an authenticated user to download and execute malicious files.
Recommendations:
For version 12.4 Update 1, consider restricting access to attachment uploads to minimize the risk of exploitation until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾