Description
Arbitrary file upload in Service import feature in ServiceTonic Helpdesk software version < 9.0.35937 allows a malicious user to execute JSP code by uploading a zip that extracts files in relative paths.
Unscored
CVE-2021-28023
EUVD-2021-14741GHSA-qpwx-f5jx-qhf4
Arbitrary file upload in Service import feature in ServiceTonic Helpdesk software version < 9.0.35937 allows a malicious user to execute JS…
Published Nov 8, 2021 · Updated Aug 3, 2024 · Assigned by mitre