Unscored CVE-2021-41729 EUVD-2021-28741GHSA-5j35-hc95-64wm

BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the serv…

Published Sep 30, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php.

References

https://github.com/meiko-S/BaiCloud-cms/issues/3