PT-2019-2773 · Тула · Тула

Publicado

2019-07-01

·

Atualizado

2019-07-01

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Тула (affected versions not specified)
Description The issue is related to an unlimited file upload vulnerability in the automated personal data management system. This could allow a remote attacker to execute arbitrary code by uploading a specially crafted file to the server using a specially formed POST request.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

BDU:2019-02718

Produtos afetados

Тула