CVE-2021-43972

Name of the Vulnerable Software and Affected Versions SysAid ITIL version 20.4.74 b10

Description The issue allows a remote authenticated attacker to copy arbitrary files on the server filesystem to the web root with an arbitrary filename. This is achieved via the tempFile and fileName parameters in the HTTP POST body to the "/UserSelfServiceSettings.jsp" API endpoint.

Recommendations For SysAid ITIL version 20.4.74 b10, as a temporary workaround, consider restricting access to the "/UserSelfServiceSettings.jsp" endpoint until a patch is available. Avoid using the tempFile and fileName parameters in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.