Skip to content
OpenAdvisories
High · 7.8 CVE-2020-7864 EUVD-2020-28796GHSA-g8xr-f823-cr6v

Raonwiz DEXT5 Editor File upload and Execution vulnerability

Published Jun 15, 2021 · Updated Sep 16, 2024 · Assigned by krcert

Description

Parameter manipulation can bypass authentication to cause file upload and execution. This will execute the remote code. This issue affects: Raonwiz DEXT5Editor versions prior to 3.5.1405747.1100.03.

Affected products

VendorProductAffectedFixed
Raonwiz DEXT5Editor unspecified – < 3.5.1405747.1100.03 3.5.1405747.1100.03

References