PT-2021-23547 · Business Dna Solutions Gmbh · Topease Platform

Published 2021-11-30 · Updated 2021-11-30 · CVE-2021-42123

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Business-DNA Solutions GmbH’s TopEase Platform versions prior to 7.1.28

Description The issue allows an authenticated remote attacker with upload privileges to perform an unrestricted file upload, enabling client-side attacks by uploading files of any type.

Recommendations For versions prior to 7.1.28, update to version 7.1.28 or later to resolve the issue.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2021-42123

Affected Products

Topease Platform

References · 3

• https://confluence.topease.ch/confluence/display/DOC/Release+Notes · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-42123 · Security Note
• https://osv.dev/vulnerability/CVE-2021-42123 · Vendor Advisory