PT-2020-18754

Name of the Vulnerable Software and Affected Versions Ahsay Cloud Backup Suite version 8.3.0.30 Description An issue was discovered in Ahsay Cloud Backup Suite, allowing for insecure file upload and code execution. This can be achieved via a "PUT /obs/obm7/file/upload" request, where the...

CVE-2020-5846: Unrestricted Upload of File with Dangerous Type

An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0.30 via a "PUT /obs/obm7/file/upload" request with the base64-encoded pathname in the X-RSW-custom-encode-path HTTP header, and the content in the HTTP request body. It is possible to upload a file in...