Unrestricted file upload

2017-10-2800:29:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in conjunction with the Select File field. This is exploitable with a Limited Admin account.

CPENameOperatorVersion
percheq3.0.3

CPE	Name	Operator	Version
	perch	eq	3.0.3

References

www.vulnerability-lab.com/get_content.php?id=2067