Description
Flexsense DiskBoss 7.7.14 allows unauthenticated attackers to upload arbitrary files via /Command/Search Files/Directory field, leading to a denial of service by crashing the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Flexsense | DiskBoss | 7.7.14 | — |
References
- Exploit Database Entry 48276 exploit
- Official Vendor Homepage product
- Software Download Link product
- https://www.vulncheck.com/advisories/flexsense-diskboss-denial-of-service-by-crashing-the-application third-party-advisory