CVE-2020-14022

Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts "Import Contacts" functionality from a file. It is possible to upload an executable or .bat file that can be executed with the help of a functionality E.g. the "Application Starter" module...

CVE-2020-14022

Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts "Import Contacts" functionality from a file. It is possible to upload an executable or .bat file that can be executed with the help of a functionality E.g. the "Application Starter" module...

CVE-2020-14022

The CVE-2020-14022 issue affects Ozeki NG SMS Gateway versions 4.17.1–4.17.6. The vulnerability arises because the product does not validate the file type during bulk import of contacts, enabling an attacker to upload a executable or .bat file. The uploaded payload could be executed via features ...