Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/12 12:00 a.m.•3 views

CVE-2020-26804: Unrestricted Upload of File with Dangerous Type

In Sentrifugo 3.2, users can share an announcement under "Organization - Announcements" tab. Also, in this page, users can upload attachments with the shared announcements. This "Upload Attachment" functionality is suffered from "Unrestricted File Upload" vulnerability so attacker can upload...

8.8CVSS5.9AI score0.01411EPSS
SaveExploits1References2
Rows per page
Query Builder