CVE-2017-7283

An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the…

published April 20, 2017

CVSS
—
EPSS
4%
Percentile
91.0
In the wild
Unconfirmed
What it is

An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04280 · 91.0th percentile
Published
2017-04-20T02:43Z
EPSS history
Timeline
  • 20 APR 02:43Z
    An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the…
    cvelistv5