PT-2017-13387 · Mirasvit · Mirasvit Helpdesk Mx

Published 2017-09-21 · Updated 2017-10-04 · CVE-2017-14320

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mirasvit Helpdesk MX versions prior to 1.5.3

Description The issue is related to the failure to filter uploaded files, which might allow remote attackers to execute arbitrary code.

Recommendations For versions prior to 1.5.3, update to version 1.5.3 or later to resolve the issue. As a temporary workaround, consider restricting file uploads until the update is applied.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-14320

Affected Products

Mirasvit Helpdesk Mx

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-14320 · Security Note
• https://osv.dev/vulnerability/CVE-2017-14320 · Vendor Advisory
• https://webshield.hu/vulnerabilities-found-webshield.html · Note