Description
improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| tobesoft | Nexacro 17 | unspecified – ≤ 17.1.2.500 | — |
High · 8.1
CVE-2021-26613
EUVD-2021-13407GHSA-f5cg-29r6-xgxh
tobesoft nexacro arbitrary file creation vulnerability
Published Feb 9, 2022 · Updated Aug 3, 2024 · Assigned by krcert