PT-2017-13387 · Mirasvit · Mirasvit Helpdesk Mx

Publicado 2017-09-21 · Atualizado 2017-10-04 · CVE-2017-14320

Positive Technologies (AI Summary)

CVSS v3.1

8.0

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mirasvit Helpdesk MX versions prior to 1.5.3

Description The issue is related to the failure to filter uploaded files, which might allow remote attackers to execute arbitrary code.

Recommendations For versions prior to 1.5.3, update to version 1.5.3 or later to resolve the issue. As a temporary workaround, consider restricting file uploads until the update is applied.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-14320

Produtos afetados

Mirasvit Helpdesk Mx

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-14320 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-14320 · Aviso do Fabricante
• https://webshield.hu/vulnerabilities-found-webshield.html · Nota