CVE-2021-28132

CVE-2021-28132 affects LUCY Security Awareness Software up to version 4.7.x. The root cause is in the Migration Tool (Support section) which permits uploading PHP files inside a system.tar.gz. The uploaded PHP can be accessed via a public/system/static URI, enabling unauthenticated remote code ex...