Security Advisory

CVE-2021-43970

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-03-07 20:58:14

Last updated 2024-08-04 04:10:17

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium 10.0.0 (1043) via a .mp3;.jsp filename for a file that begins with audio data bytes. It allows an authenticated (low privileged) attacker to execute remote code on the target server within the context of application's permissions (SYSTEM).

← Browse all CVEs View on cve.org ↗