by Kastro
Paper/Archive/CVE-2021-20721

CVE-2021-20721

kujirahand KonaWiki2 — KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors.

EPSS 2%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 74.6.746 × 2014.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code may be executed.

Affected

ProductAffectedFixed inSource
KonaWiki2versions prior to 2.2.4–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refkujirahand.com/konawikirefjvn.jp/en/jp/JVN34232719/index.html