Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-8404
HistoryMay 14, 2019 - 4:29 p.m.

Design/Logic Flaw

2019-05-1416:29:00
PRIOn knowledge base
www.prio-n.com
2

6.2 Medium

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

88.0%

An issue was discovered in Webiness Inventory 2.3. The ProductModel component allows Arbitrary File Upload via a crafted product image during the creation of a new product. Consequently, an attacker can steal information from the site with the help of an installed executable file, or change the contents of pages.

CPENameOperatorVersion
webiness_inventoryeq2.3

6.2 Medium

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

88.0%