CVE-2019-8404

An issue was discovered in Webiness Inventory 2.3

published May 14, 2019

CVSS
—
EPSS
8%
Percentile
94.7
In the wild
Unconfirmed
What it is

An issue was discovered in Webiness Inventory 2.3. The ProductModel component allows Arbitrary File Upload via a crafted product image during the creation of a new product. Consequently, an attacker can steal information from the site with the help of an installed executable file, or change the contents of pages.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07873 · 94.7th percentile
Published
2019-05-14T15:29Z
EPSS history
Timeline
  • 14 MAY 15:29Z
    An issue was discovered in Webiness Inventory 2.3
    cvelistv5