CVE-2020-11815

In Rukovoditel 2.5.2, the vulnerability arises from how the application handles file uploads via manipulated Content-Type headers, enabling an attacker to upload arbitrary files and execute commands on the server when Maintenance Mode is off. Affected component: file upload handling in Rukovodite...