Security Advisory

CVE-2022-27249

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-04-03 22:16:33

Last updated 2024-08-03 05:25:32

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execute arbitrary code by using UploadDwg to upload a crafted aspx file to the web root, and then visiting the URL for this aspx resource.

← Browse all CVEs View on cve.org ↗