CVEvulnerability
CVE-2021-32538
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-07-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-434
Description
ARTWARE CMS parameter of image upload function does not filter the type of upload files which allows remote attackers can upload arbitrary files without logging in, and further execute code unrestrictedly.
Affected configurations
• artware cms project artware cms (< 2021-01-08)
Related
Weakness · CWE (1)
- CWE-434 Unrestricted Upload of File with Dangerous Type weakness
References
- https://www.twcert.org.tw/tw/cp-132-4850-9b53f-1.html Third Party Advisory
- https://www.twcert.org.tw/tw/cp-132-4850-9b53f-1.html Third Party Advisory