1 matches found
CVE-2020-26804: Unrestricted Upload of File with Dangerous Type
In Sentrifugo 3.2, users can share an announcement under "Organization - Announcements" tab. Also, in this page, users can upload attachments with the shared announcements. This "Upload Attachment" functionality is suffered from "Unrestricted File Upload" vulnerability so attacker can upload...
8.8CVSS5.9AI score0.01411EPSS
SaveExploits1References2
20