Skip to content
OpenAdvisories
High · 8.1 CVE-2021-26639 EUVD-2021-13433GHSA-6fq5-356h-9jrc

WISA Smart Wing CMS File Download Vulnerability

Published Aug 17, 2022 · Updated Aug 3, 2024 · Assigned by krcert

Description

This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system.

Affected products

VendorProductAffectedFixed
WISA Smart Wing CMS unspecified – < r18715.20211229 r18715.20211229

References