CVE-2018-7217

In Bravo Tejari Procurement Portal, uploaded files are not properly validated by the application either on the client or the server side

published February 18, 2018

CVSS
—
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

In Bravo Tejari Procurement Portal, uploaded files are not properly validated by the application either on the client or the server side. An attacker can take advantage of this vulnerability and upload malicious executable files to compromise the application, as demonstrated by an esop/evm/OPPreliminaryForms.do?formId=857 request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01840 · 78.8th percentile
Published
2018-02-18T06:00Z
EPSS history
Timeline
  • 18 FEB 06:00Z
    In Bravo Tejari Procurement Portal, uploaded files are not properly validated by the application either on the client or the server side
    cvelistv5