CVE-2021-35483

The Applications component of Nokia IMPACT (version through 19.11.2.10-20210118042150283 ) is vulnerable to an arbitrary file upload flaw. An authenticated user can upload JavaScript files via the /ui/rest-proxy/application fileupload parameter, either when adding a new application or editing an ...