CVE-2021-33353

2023-03-0800:00:00

mitre

www.cve.org

cve-2021-33353

wyomind help desk

magento 2

directory traversal

arbitrary code execution

file attachment

9.8 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.6%

JSON

Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via the file attachment directory setting.

References

www.exploit-db.com/exploits/50113

www.wyomind.com/magento2/helpdesk-magento-2.html