Description
admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable JSP files, resulting in remote code execution, because filePath can have directory traversal and fileContent can be valid JSP code.
Unscored
CVE-2020-26806
EUVD-2020-19342GHSA-cq3j-jr55-f9fq
admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable JSP files, resulting in remote code executio…
Published Jul 31, 2021 · Updated Aug 4, 2024 · Assigned by mitre