Unscored CVE-2021-20721 EUVD-2021-8135GHSA-8438-2753-v3v3

KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scri…

Published May 20, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Description

KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code may be executed.

Affected products

Vendor	Product	Affected	Fixed
kujirahand	KonaWiki2	versions prior to 2.2.4	—

References

https://kujirahand.com/konawiki/
https://jvn.jp/en/jp/JVN34232719/index.html