EXPOSURES › CVE-2021-45834
CVE-2021-45834
CRITICAL
DETAIL
SourceNVD · cve
Published2022-03-18
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2021-45834 ↗
⚡ RCE
SHAME 50/100
rce
An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be automatically processed within the product's environment or lead to arbitrary code execution.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
PLAYERS IMPLICATED
DESCRIPTION
An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be automatically processed within the product's environment or lead to arbitrary code execution.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.