CVE-2020-21359: Malicious File Upload
Published Aug 11, 2021
·Updated
An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded file's name.
Affected Software
1 affected component
maccms Maccms=10.0
Event History
Aug 11, 2021
CVE Published
via MITRE·08:53 PM
Data Sourced
via MITRE·08:53 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2020-21359.
2
What is the title of the vulnerability?
The title of the vulnerability is 'An arbitrary file upload vulnerability in the Template Upload function of Maccms10'.
3
What is the severity of CVE-2020-21359?
The severity of CVE-2020-21359 is classified as critical with a severity score of 9.8.
4
What software is affected by CVE-2020-21359?
The Maccms10 software version 10.0 is affected by CVE-2020-21359.
5
How can an attacker exploit CVE-2020-21359?
An attacker can exploit CVE-2020-21359 by bypassing the suffix whitelist verification in the Template Upload function of Maccms10 to execute arbitrary code.