9.8
CVE-2021-36581
- EPSS 0.54%
- Veröffentlicht 14.09.2021 12:15:09
- Zuletzt bearbeitet 21.11.2024 06:13:51
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginKooboo CMS 2.1.1.0 is vulnerable to Insecure file upload. It is possible to upload any file extension to the server. The server does not verify the extension of the file and the tester was able to upload an aspx to the server.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Kooboo ≫ Kooboo Cms Version2.1.1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.54% | 0.671 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-434 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.