未評価
An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a fi...
CVE-2020-8639
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension. This allows an authenticated attacker to upload a malicious file (containing PHP code to execute operating system commands) to a publicly accessible directory of the application.
参照URL
- patch ackcent.com
- patch github.com
- report packetstormsecurity.com