CVE-2021-43970

An arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium 10.0.0 (1043) via a .mp3;.jsp filename for a file that begins with…

published March 7, 2022

CVSS
—
EPSS
2%
Percentile
78.1
In the wild
Unconfirmed
What it is

An arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium 10.0.0 (1043) via a .mp3;.jsp filename for a file that begins with audio data bytes. It allows an authenticated (low privileged) attacker to execute remote code on the target server within the context of application's permissions (SYSTEM).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01777 · 78.1th percentile
Published
2022-03-07T20:58Z
EPSS history
Timeline
  • 07 MAR 20:58Z
    An arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium 10.0.0 (1043) via a .mp3;.jsp filename for a file that begins with…
    cvelistv5