CVE-2021-41921: Malicious File Upload
novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks and arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-41921?
The severity of CVE-2021-41921 is critical with a score of 9.8.
What is the vulnerability description of CVE-2021-41921?
CVE-2021-41921 refers to a vulnerability in novel-plus V3.6.1 that allows unrestricted file uploads, which can lead to server attacks and arbitrary code execution.
What software version is affected by CVE-2021-41921?
novel-plus V3.6.1 is affected by CVE-2021-41921.
How can unrestricted file uploads in novel-plus V3.6.1 be exploited?
Unrestricted file uploads in novel-plus V3.6.1 can be exploited by uploading files with malicious suffixes and contents, leading to server attacks and potential arbitrary code execution.
Is there a reference for CVE-2021-41921?
Yes, you can find more information about CVE-2021-41921 at the following link: [GitHub Issue #62](https://github.com/201206030/novel-plus/issues/62).