CVE-2021-44035

Wolters Kluwer TeamMate AM 12.4 Update 1 mishandles attachment uploads, such that an authenticated user may download and execute malicious files

Medium · published December 17, 2021

CVSS v3.1
4.4
EPSS
1%
Percentile
46.2
In the wild
Unconfirmed
What it is

Wolters Kluwer TeamMate AM 12.4 Update 1 mishandles attachment uploads, such that an authenticated user may download and execute malicious files.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AC:H/AV:N/A:N/C:L/I:L/PR:L/S:C/UI:R
CVSS v4.0
Not supplied
EPSS
0.00566 · 46.2th percentile
Published
2021-12-17T15:17Z
EPSS history
Timeline
  • 17 DEC 15:17Z
    Wolters Kluwer TeamMate AM 12.4 Update 1 mishandles attachment uploads, such that an authenticated user may download and execute malicious files
    cvelistv5