CVE-2026-44257criticalCWE-77

CVE-2026-44257: falha crítica em efwGrp efw4.X

efw4.X: RCE via zipslip

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar efw4.X

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.4%
efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, efw.file.FileManager.unZip writes zip entries to disk using new File(baseDir, zipEntry.getName()) with no canonical-path check. An entry name such as ../../../pwned.jsp escapes the intended extraction directory and lands anywhere the Tomcat process can write — including the servlet context root. Combined with the framework's multipart /uploadServlet and an event that calls file.saveUploadFiles + FileManager.unZip, a remote attacker with no credentials drops a JSP webshell and executes arbitrary commands as the Tomcat user. This vulnerability is fixed in 4.08.010.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
efwGrp · efw4.X
CVEs relacionadas — efwGrp efw4.X

No mesmo produto, das mais perigosas para as menos.

CVE-2026-44258CRITICALefw4.X: Path Traversal via Unchecked dst Parameter leads to Remote Code ExecutionEPSS 0.4%CVE-2026-44260HIGHefw4.X: readonly Flag Not Enforced Server-SideEPSS 0.4%CVE-2026-44259MEDIUMefw4.X: Stored XSS via previewServletEPSS 0.2%