Code injection

2019-09-1712:15:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.6%

JSON

In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a vulnerability has been identified that may allow arbitrary files to be uploaded to Code42 servers and executed. This vulnerability could allow an attacker to create directories and save files on Code42 servers, which could potentially lead to code execution.

CPENameOperatorVersion
code42le6.7.5
code42ge6.8.4
code42le6.8.8
code42eq7.0.0

Name	Operator	Version
code42	le	6.7.5
code42	ge	6.8.4
code42	le	6.8.8
code42	eq	7.0.0

References

code42.com/r/support/CVE-2019-15131

support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories