PT-2022-12196

CVE-2021-44663

·

Published

2022-02-24

·

Updated

2022-03-03

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Xerte Project Xerte versions 3.8.4 and earlier
Description A Remote Code Execution (RCE) issue exists via a crafted php file through elfinder in connetor.php. This allows for potential code execution.
Recommendations For Xerte Project Xerte versions 3.8.4 and earlier, consider disabling the elfinder connector in connetor.php as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Researchers
Vendors
Affected products
Related identifiers
CVE-2021-44663
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com