CVE-2021-34074
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 7.5%
exploitation probability
7.5%top 6% of all CVEs
observed exploitation
nono source reports it
PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the File Manager. To bypass the built-in protection, a relative path is used in the requests.
Affected products
n/a · n/a