CVE-2021-42839CWE-434

Grand Vice info Co. webopac7 - Arbitrary File Upload

High · published November 15, 2021

CVSS v3.1
8.8
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

Grand Vice info Co. webopac7 file upload function fails to filter special characters. While logging in with general user’s permission, remote attackers can upload malicious script and execute arbitrary code to control the system or interrupt services.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02427 · 84.1th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2021-11-15T09:30Z
EPSS history
Timeline
  • 15 NOV 09:30Z
    Grand Vice info Co. webopac7 - Arbitrary File Upload
    cvelistv5