Beveiligingsadvies

CVE-2020-26804

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-11-12 18:52:42

Laatst bijgewerkt 2024-08-04 16:03:22

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab. Also, in this page, users can upload attachments with the shared announcements. This "Upload Attachment" functionality is suffered from "Unrestricted File Upload" vulnerability so attacker can upload malicious files using this functionality and control the server.

← Alle CVE's bekijken Bekijk op cve.org ↗