CVE-2019-15131 File upload in n/a

What is CVE-2019-15131?

CVE-2019-15131 is a critical vulnerability in n/a, published on 17 Sep 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a vulnerability has been identified that may allow arbitrary files to be uploaded to Code42 servers and executed. This vulnerability could allow an attacker to create directories and save files on Code42 servers, which could potentially lead to code execution.

Weakness: CWE-434

Which versions are affected by CVE-2019-15131?

It affects 1 product.

Products include Code42 Code42.

How do I fix CVE-2019-15131?

No fix has been published for CVE-2019-15131 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-15131 being exploited?

There is no known exploitation of CVE-2019-15131 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2021-43269 Code injection in n/a High 8.8
• CVE-2019-11553 Privilege escalation in n/a High 8.8
• CVE-2018-20131 Path traversal in n/a High 7.8
• CVE-2019-16860 Privilege escalation in n/a High 7.3
• CVE-2019-16861 Privilege escalation in n/a High 7.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-x226-4ffp-q9gp.