Loading feed…
Adobe Commerce and Magento Unrestricted File Upload Vulnerability
Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the…
Confirm whether Adobe Commerce is in your estate.
all High · vulnerabilities · exploited in the wild
Updated
A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. Known-exploited catalogue reports exploitation in the wild.
Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially… Known-exploited…
Next step: Confirm whether Adobe Commerce is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.
SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail…
Next step: Confirm whether SmarterTools SmarterMail is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
ThreatSonar Anti-Ransomware does not properly validate the content of uploaded files. Known-exploited catalogue reports exploitation in the wild.
Next step: Confirm whether TeamT5 ThreatSonar Anti-Ransomware is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
End of feed