Lucene search
Veracode Vulnerability DatabaseVERACODE:36962HistorySep 07, 2022 - 5:26 a.m.
Arbitrary File Upload
2022-09-0705:26:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
feehi/cms
arbitrary file upload
vulnerability
malicious files
remote code execution
software
0.003 Low
EPSS
Percentile
65.8%
feehi/cms is vulnerable to arbitrary file upload. The library only verifies the suffix of a file in the frontend, which allows an attacker to upload malicious files via the background avatar upload and remotely execute arbitrary code on the system.
Related
osv
osv
CVE-2020-21516
2022-09-06 19:15:08
FeehiCMS has an arbitrary file upload vulnerability
2022-09-07 00:01:50
cvelist
cvelist
CVE-2020-21516
2022-09-06 18:08:44
prion
prion
Design/Logic Flaw
2022-09-06 19:15:00
cve
cve
CVE-2020-21516
2022-09-06 19:15:08
github
github
FeehiCMS has an arbitrary file upload vulnerability
2022-09-07 00:01:50
nvd
nvd
CVE-2020-21516
2022-09-06 19:15:08