CVE-2021-42675

2022-06-1416:29:42

mitre

www.cve.org

kreado kreasfero

file upload

vulnerability

remote code execution

media directory

cve-2021-42675

AI Score

Confidence

High

EPSS

0.018

Percentile

88.6%

JSON

Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory. One can upload a malicious PHP file and obtain remote code execution.

References

kreado.com

kreasfero.com

twitter.com/1ofThegutHakrs/status/1536246485188128768