CVE-2021-45808: Malicious File Upload
Published Jan 19, 2022
·Updated
jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server.
Affected Software
1 affected component
jpress Jpress=4.2.0
Event History
Jan 19, 2022
CVE Published
via MITRE·12:51 PM
Data Sourced
via MITRE·12:51 PM
Description
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-45808?
CVE-2021-45808 has been categorized as a high-severity vulnerability due to the potential for arbitrary file uploads.
2
How do I fix CVE-2021-45808?
To mitigate CVE-2021-45808, disable unvalidated user registration and restrict file upload permissions.
3
What impact can CVE-2021-45808 have on my system?
CVE-2021-45808 can allow attackers to upload malicious files, potentially leading to further exploitation of the server.
4
Which versions of software are affected by CVE-2021-45808?
CVE-2021-45808 specifically affects jpress version 4.2.0.
5
Is there a patch available for CVE-2021-45808?
Currently, there is no official patch for CVE-2021-45808, so applying mitigations is crucial until a fix is provided.