CVE-2021-31926

The CVE-2021-31926 issue affects CubeCoders AMP 2.1.x prior to 2.1.1.2: a remote, authenticated user can cause the local system firewall to open ports by sending an HTTP(S) request directly to the AMP API endpoint, despite lacking permission to alter network configuration. This vulnerability is d...

CVE-2021-34539

CVE-2021-34539 affects CubeCoders AMP prior to 2.1.1.8. The vulnerability stems from improper validation of the Java Version setting, allowing an unintended executable path to be set. This enables high-privileged users to trigger code execution. Exploitation status is not detailed in the provided...