CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

ATTACKERKB•added 2022/04/03 11:15 p.m.•2 views

CVE-2022-27249

An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execute arbitrary code by using UploadDwg to upload a crafted aspx file to the web root, and then visiting the URL for this aspx resource...

9CVSS6.2AI score0.04628EPSS

SaveExploits3References3

NVD•added 2022/04/03 11:15 p.m.•27 views

CVE-2022-27249

9CVSS0.04628EPSS

SaveExploits3References2

CVE•added 2022/04/03 10:16 p.m.•89 views

CVE-2022-27249

CVE-2022-27249 describes an unrestricted file upload in IdeaRE RefTree prior to 2021.09.17. The vulnerability allows remote authenticated users to upload a crafted aspx file to the web root via the UploadDwg feature and then access the resource to execute arbitrary code. Impact is high (remote co...

9CVSS8.7AI score0.04628EPSS

SaveExploits3References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by