CVE-2021-42123highCWE-434

CVE-2021-42123: falha de alta gravidade em Business-DNA Solutions GmbH TopEase

Missing Upload Filter in TopEase

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TopEase

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.3epss 1.1%
Unrestricted File Upload in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 in the File Upload Functions allows an authenticated remote attacker with Upload privileges to upload files with any file type, enabling client-side attacks.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Produtos afetados
Business-DNA Solutions GmbH · TopEase
CVEs relacionadas — Business-DNA Solutions GmbH TopEase

No mesmo produto, das mais perigosas para as menos.

CVE-2021-42544HIGHLack of Rate limiting in Authentication in TopEaseEPSS 1.4%CVE-2021-42115HIGHMissing HTTPOnly flag on sensitive cookie in TopEaseEPSS 1.3%CVE-2021-42545HIGHInsufficient Session Expiration in TopEaseEPSS 1.1%CVE-2021-42120MEDIUMMissing Character Length (Denial of Service) in TopEaseEPSS 1.1%CVE-2021-42121MEDIUMDenial of Service via Invalid Date Format in TopEaseEPSS 1.0%CVE-2021-42116MEDIUMUnauthorized Menu Item Access in TopEaseEPSS 0.8%