CVE-2021-45834: Malicious File Upload
Published Mar 18, 2022
·Updated
An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be automatically processed within the product's environment or lead to arbitrary code execution.
Affected Software
1 affected component
OpenDocMan OpenDocMan=1.4.4
Event History
Mar 18, 2022
CVE Published
via MITRE·10:55 AM
Data Sourced
via MITRE·10:55 AM
Description
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-45834?
CVE-2021-45834 has a high severity rating due to the potential for arbitrary code execution if exploited.
2
How do I fix CVE-2021-45834?
To fix CVE-2021-45834, upgrade OpenDocMan to the latest version that addresses this vulnerability.
3
What types of files can be uploaded in relation to CVE-2021-45834?
CVE-2021-45834 allows the upload of files with dangerous MIME types due to a MIME-bypass issue.
4
What could an attacker achieve by exploiting CVE-2021-45834?
By exploiting CVE-2021-45834, an attacker could execute arbitrary code within the OpenDocMan environment.
5
Which version of OpenDocMan is affected by CVE-2021-45834?
CVE-2021-45834 specifically affects OpenDocMan version 1.4.4.