CVE-2022-27249

An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execute arbitrary code by using UploadDwg to…

published April 3, 2022

CVSS
—
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execute arbitrary code by using UploadDwg to upload a crafted aspx file to the web root, and then visiting the URL for this aspx resource.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04938 · 92.1th percentile
Published
2022-04-03T22:16Z
EPSS history
Timeline
  • 03 APR 22:16Z
    An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execute arbitrary code by using UploadDwg to…
    cvelistv5