Lucene search

K
cvelistMitreCVELIST:CVE-2021-27964
HistoryMar 05, 2021 - 1:37 a.m.

CVE-2021-27964

2021-03-0501:37:20
mitre
www.cve.org
4
sonlogger
unauthenticated
file upload
arbitrary
extension
content

AI Score

9.7

Confidence

High

EPSS

0.696

Percentile

98.1%

SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Config/SaveUploadedHotspotLogoFile without any authentication or session header. There is no check for the file extension or content of the uploaded file.

AI Score

9.7

Confidence

High

EPSS

0.696

Percentile

98.1%