CVE-2018-16796

CVE-2018-16796 affects HiScout GRC Suite prior to 3.1.5, where the file-upload functionality allows unrestricted upload of files with dangerous types. The issue, described in SySS advisory SYSS-2018-015 and mirrored in multiple feeds, is a vulnerability in the product’s handling of uploaded conte...

HiScout GRC Suite File Upload

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2018-015 Product: HiScout GRC Suite Manufacturer: HiScout GmbH Affected Versions: 3.1.5 Tested Versions: 3.1.3.12 Vulnerability Type: Unrestricted Upload of File with Dangerous Type Risk Level: High Solution Status: Fixed...