CVE-2021-25857

2023-08-1100:00:00

mitre

www.cve.org

cve-2021-25857

authenticated attack

arbitrary code execution

font type parameter

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

35.3%

JSON

An issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to execute arbitrary code via the font_type parameter to setup.php.

References

github.com/pcmt/superMicro-CMS/issues/2