Security Advisory

CVE-2021-41919

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-10-08 15:36:45

Last updated 2024-08-04 03:22:25

Assigner mitre

State PUBLISHED

Description

webTareas version 2.4 and earlier allows an authenticated user to arbitrarily upload potentially dangerous files without restrictions. This is working by adding or replacing a personal profile picture. The affected endpoint is /includes/upload.php on the HTTP POST data. This allows an attacker to exploit the platform by injecting code or malware and, under certain conditions, to execute code on remote user browsers.

← Browse all CVEs View on cve.org ↗