Design/Logic Flaw

2023-06-1604:15:00

PRIOn knowledge base

www.prio-n.com

omicard edm

file upload

vulnerability

remote attacker

system security

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

JSON

OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

References

www.twcert.org.tw/en/cp-139-7190-d73c1-2.html