by Kastro
Paper/Archive/CVE-2021-38697

CVE-2021-38697

mitre — SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file exte…

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 85.9.859 × 2017.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extension which can lead to arbitrary code execution.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refplay.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=USreforangeo.tech/post/2021/12/24/First-CVEs.htmlrefsawatdee.github.io/post/2021/12/24/First-CVEs.htmlrefinfoma.net/index.php/saraban