by Kastro
Paper/Archive/CVE-2021-32538

CVE-2021-32538

ARTWARE CMS — ARTWARE CMS - Unrestricted Upload of File

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 80.8.808 × 2016.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

ARTWARE CMS parameter of image upload function does not filter the type of upload files which allows remote attackers can upload arbitrary files without logging in, and further execute code unrestrictedly.

Affected

ProductAffectedFixed inSource
CMSunspecified – 2021/1/8–CNA

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reftwcert.org.tw/tw/cp-132-4850-9b53f-1.html