CVE-2021-26610CWE-353

godomall5 remote code execution vulnerability

High · published October 27, 2021

CVSS v3.1
7.2
EPSS
0%
Percentile
38.4
In the wild
Unconfirmed
What it is

The move_uploaded_file function in godomall5 does not perform an integrity check of extension or authority when user upload file. This vulnerability allows an attacker to execute an remote arbitrary code.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00453 · 38.4th percentile
Weakness
CWE-353 · Missing Support for Integrity Check
Published
2021-10-27T00:45Z
EPSS history
Timeline
  • 27 OCT 00:45Z
    godomall5 remote code execution vulnerability
    cvelistv5