CVE-2021-26630

🗓️ 19 May 2022 14:52:27Reported by krcertType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 70 Views

Improper input validation in HANDY Groupware’s ActiveX module allows file download or execution

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2021-26630	19 May 202218:29	–	circl
CNNVD	Handysoft Groupware 输入验证错误漏洞	19 May 202200:00	–	cnnvd
Cvelist	CVE-2021-26630 HANDY Groupware file download and execute vulnerability	19 May 202214:52	–	cvelist
EUVD	EUVD-2021-13424	7 Oct 202500:30	–	euvd
NVD	CVE-2021-26630	19 May 202215:15	–	nvd
Prion	Input validation	19 May 202215:15	–	prion
RedhatCVE	CVE-2021-26630	6 Feb 202503:40	–	redhatcve

NVD

Node

handysoft groupwareRange<1.7.4.7

handysoft groupwareRange2.0.0.0–2.0.3.7

handysoft groupwareRange4.0.0.0–4.0.1.8

AND

microsoft windowsMatch-

[
  {
    "platforms": [
      "Windows"
    ],
    "product": "HANDY Groupware",
    "vendor": "Handysoft Co.,Ltd",
    "versions": [
      {
        "lessThanOrEqual": "1.7.4.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "Windows"
    ],
    "product": "HANDY Groupware",
    "vendor": "Handysoft Co.,Ltd",
    "versions": [
      {
        "lessThanOrEqual": "2.0.3.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "Windows"
    ],
    "product": "HANDY Groupware",
    "vendor": "Handysoft Co.,Ltd",
    "versions": [
      {
        "lessThanOrEqual": "4.0.1.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]