CVE-2021-20721: Malicious File Upload
Published May 20, 2021
·Updated
KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code may be executed.
Affected Software
1 affected component
Kujirahand Konawiki<2.2.4
Event History
May 20, 2021
CVE Published
via MITRE·01:15 AM
Data Sourced
via MITRE·01:15 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2021-20721.
2
What is the severity level of CVE-2021-20721?
The severity level of CVE-2021-20721 is critical.
3
How does CVE-2021-20721 impact the affected software?
CVE-2021-20721 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code may be executed.
4
Which versions of KonaWiki2 are affected by CVE-2021-20721?
KonaWiki2 versions prior to 2.2.4 are affected by CVE-2021-20721.
5
Is there a fix available for CVE-2021-20721?
Yes, updating to version 2.2.4 or newer of KonaWiki2 will fix the vulnerability.