2 matches found
CVE-2020-26583
An issue was discovered in Sage DPW 202006x before 202006002. It allows unauthenticated users to upload JavaScript in a file via the expenses claiming functionality. However, to view the file, authentication is required. By exploiting this vulnerability, an attacker can persistently include...
6.1CVSS5.9AI score0.01EPSS
SaveExploits1References3
CVE-2020-26583: Unrestricted Upload of File with Dangerous Type
An issue was discovered in Sage DPW 202006x before 202006002. It allows unauthenticated users to upload JavaScript in a file via the expenses claiming functionality. However, to view the file, authentication is required. By exploiting this vulnerability, an attacker can persistently include...
6.1CVSS6.1AI score0.01EPSS
SaveExploits1References2
20