Design/Logic Flaw

2023-03-2704:15:00

PRIOn knowledge base

www.prio-n.com

file upload vulnerability

remote code execution

arbitrary command execution

service disruption

9.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.3%

JSON

HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary command or disrupt service.

CPENameOperatorVersion
oaklouds_portalge3.0
oaklouds_portallt3.0
oaklouds_portalge2.0
oaklouds_portallt2.0

Name	Operator	Version
oaklouds_portal	ge	3.0
oaklouds_portal	lt	3.0
oaklouds_portal	ge	2.0
oaklouds_portal	lt	2.0

References

www.twcert.org.tw/tw/cp-132-6973-45872-1.html