CVE-2021-39273

CVE-2021-39273 affects XeroSecurity Sn1per 9.0 (free version). The connected sources describe insecure permissions (0777) set during application execution, enabling an unprivileged user to modify the main application, modules, and configuration files, which leads to arbitrary code execution with ...