PT-2024-34309 · Unknown · Rsvpmaker For Toastmasters
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
RSVPMaker for Toastmasters versions prior to 6.2.4
Description:
The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This poses a risk of web server compromise.
Recommendations:
Update to version 6.2.4 to fix the issue. As a temporary workaround, consider restricting file uploads to prevent potential exploitation until the update is applied.
Fix
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Rsvpmaker For Toastmasters