CVE-2019-17322

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to be written

published October 30, 2019

CVSS
—
EPSS
1%
Percentile
68.6
In the wild
Unconfirmed
What it is

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to be written. This can be an executable file that is written to in the arbitrary directory. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01224 · 68.6th percentile
Published
2019-10-30T20:46Z
EPSS history
Timeline
  • 30 OCT 20:46Z
    ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to be written
    cvelistv5