CVE-2020-26553: Malicious File Upload
Published Nov 17, 2020
·Updated
An issue was discovered in Aviatrix Controller before R6.0.2483. Several APIs contain functions that allow arbitrary files to be uploaded to the web tree.
Affected Software
1 affected component
Aviatrix Controller=5.3.1516
Event History
Nov 17, 2020
CVE Published
via MITRE·08:59 PM
Data Sourced
via MITRE·08:59 PM
Description
Frequently Asked Questions
1
What is CVE-2020-26553?
CVE-2020-26553 is a vulnerability in Aviatrix Controller before R6.0.2483 that allows arbitrary files to be uploaded to the web tree.
2
How severe is CVE-2020-26553?
CVE-2020-26553 is considered critical with a severity rating of 9.8 out of 10.
3
What software is affected by CVE-2020-26553?
Aviatrix Controller version 5.3.1516 is affected by CVE-2020-26553.
4
How can I fix CVE-2020-26553?
To fix CVE-2020-26553, upgrade to Aviatrix Controller R6.0.2483 or later.
5
Where can I find more information about CVE-2020-26553?
You can find more information about CVE-2020-26553 at https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/.