Security Advisory

CVE-2020-21976

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-08-11 17:41:43
Last updated 2024-08-04 14:30:33
Assigner mitre
State PUBLISHED

Description

An arbitrary file upload in the <input type="file" name="user_image"> component of NewsOne CMS v1.1.0 allows attackers to webshell and execute arbitrary commands.