CVE-2021-32538
Critical
Description
ARTWARE CMS parameter of image upload function does not filter the type of upload files which allows remote attackers can upload arbitrary files without logging in, and further execute code unrestrictedly.
SeverityCritical
CVSS9.8
Exploit probability—
ProductArtware Cms
PublishedJul 7, 2021
First seenJul 7, 2021
Weakness typeCWE-434Unrestricted upload of dangerous file type
How to fix
Update
- artware_cms_project artware_cms2021-01-08 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| artware_cms_project artware_cms | v < 2021-01-08 | 2021-01-08 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.