CVE-2021-28931

CVE-2021-28931

EPSS 1.2%

Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes directory via a crafted zip file uploaded to the Themes panel.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/bousalman/ForkCMS-arbitrary-upload/blob/main/README.md https://github.com/forkcms/forkcms/releases/tag/5.9.2