Non évaluée
Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes...
CVE-2020-25790
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes the significance of this report because "admins are considered trustworthy"; however, the behavior "contradicts our security policy" and is being fixed for 5.2
Références
- advisory packetstormsecurity.com
- advisory seclists.org
- advisory github.com
- report packetstormsecurity.com