Description
CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a related issue to CVE-2017-16798.
References
- 48742 exploit
Unscored
CVE-2020-17462
EUVD-2020-9414GHSA-hr6q-cqgm-w6pf
CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a related issue to C…
Published Aug 14, 2020 · Updated Aug 4, 2024 · Assigned by mitre