CVE-2021-32538

ARTWARE CMS - Unrestricted Upload of File

State: Published
Severity: 9.8 Critical
Published: Jul 7, 2021
Updated: Sep 17, 2024
Reserved: May 10, 2021

Description

ARTWARE CMS parameter of image upload function does not filter the type of upload files which allows remote attackers can upload arbitrary files without logging in, and further execute code unrestrictedly.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	twcert

Weaknesses

CWE-434 Unrestricted Upload of File with Dangerous Type

Affected Products

Product	Versions
CMSARTWARE	2021/1/8 and earlierAffected

References

https://www.twcert.org.tw/tw/cp-132-4850-9b53f-1.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.