CVE-2020-11817

In Rukovoditel V2.5.2, attackers can upload an arbitrary file to the server just changing the the content-type value. As a result of that, an attacker can execute a command on the server. This specific attack only occurs with the Maintenance Mode setting...

CVE-2020-11817

In Rukovoditel V2.5.2, attackers can upload an arbitrary file to the server just changing the the content-type value. As a result of that, an attacker can execute a command on the server. This specific attack only occurs with the Maintenance Mode setting...

CVE-2020-11817

The CVE describes a vulnerability in Rukovoditel V2.5.2 where an attacker can upload an arbitrary file by altering the Content-Type, leading to command execution on the server. This occurs in Maintenance Mode and is exposed via a network attack vector with high impact to confidentiality, integrit...