Beveiligingsadvies

CVE-2021-34685

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-11-08 03:37:53

Laatst bijgewerkt 2024-08-04 00:19:47

Toegewezen door mitre

CVSS-score 2.7

Status PUBLISHED

Beschrijving

UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, which allows an authenticated user to upload various files of different file types. Specifically, a .jsp file is not allowed, but a .jsp. file is allowed (and leads to remote code execution).

← Alle CVE's bekijken Bekijk op cve.org ↗