CVE-2021-42967: Malicious File Upload

Published May 13, 2022

Updated

Unrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java in novel-plus all versions allows allows an attacker to upload malicious JSP files.

Affected Software

1 affected component

xxyopen Novel-Plus

Event History

May 13, 2022

CVE Published

via MITRE·11:05 AM

Data Sourced

via MITRE·11:05 AM

Description

Frequently Asked Questions

What is CVE-2021-42967?

CVE-2021-42967 is a vulnerability that allows an attacker to upload malicious JSP files in the /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java component of novel-plus all versions.

How severe is CVE-2021-42967?

CVE-2021-42967 has a severity rating of 9.8 (critical).

What can an attacker do with CVE-2021-42967?

An attacker can use CVE-2021-42967 to upload malicious JSP files.

Is there a fix for CVE-2021-42967?

Currently, there is no specific fix available for CVE-2021-42967, but it is recommended to update to a patched version of novel-plus once it becomes available.

Where can I find more information about CVE-2021-42967?

More information about CVE-2021-42967 can be found at the following link: [GitHub Issue #62](https://github.com/201206030/novel-plus/issues/62).