exploitDog

CVE-2021-40940

Опубликовано: 15 июн. 2022

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability.

Ссылки

https://github.com/monstra-cms/monstra/issues/471
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/monstra-cms/monstra/issues/471
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:monstra:monstra:*:*:*:*:*:*:*:*

Версия до 3.0.4 (включая)

EPSS

Процентиль: 76%

0.00979

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-rf4j-5wqh-fgfx

CVSS3: 9.8

github

больше 3 лет назад

Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability.

EPSS

Процентиль: 76%

0.00979

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-434