2 matches found
Code injection
The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality...
6.5CVSS8.6AI score0.00966EPSS
SaveExploits0References1Affected Software3
CVE-2021-42540
The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality...
8.8CVSS5.8AI score0.00966EPSS
SaveExploits0References2Affected Software1
20