CVE-2021-45834 File upload in n/a
Attackers can upload malicious files via MIME bypass in OpenDocMan, potentially leading to arbitrary code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-45834?
CVE-2021-45834 is a critical vulnerability in n/a, published on 18 Mar 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be automatically processed within the product's environment or lead to arbitrary code execution.
Weakness: CWE-434
Which versions are affected by CVE-2021-45834?
It affects 1 product.
Products include Opendocman Opendocman.
How do I fix CVE-2021-45834?
No fix has been published for CVE-2021-45834 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-45834 being exploited?
There is no known exploitation of CVE-2021-45834 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-6wx2-cw59-5j2p.