Voicent SaveFileServlet unauthenticated JSP RCE

Unauthenticated multipart POST /savefile.jsp with forwardpage auth bypass writes a JSP under the web root; subsequent GET executes arbitrary commands. """Voicent Call Center SaveFileServlet unauthenticated JSP upload RCE.""" from future import annotations import uuid from urllib.parse import quot...