Security Advisory

CVE-2021-34074

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-06-25 15:04:55
Last updated 2024-08-04 00:05:52
Assigner mitre
State PUBLISHED

Description

PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the File Manager. To bypass the built-in protection, a relative path is used in the requests.