Skip to content
OpenAdvisories
High · 7.3 CVE-2021-42123 EUVD-2021-29108GHSA-2fvx-vhr6-r4cv

Missing Upload Filter in TopEase

Published Nov 30, 2021 · Updated Aug 4, 2024 · Assigned by NCSC.ch

Description

Unrestricted File Upload in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 in the File Upload Functions allows an authenticated remote attacker with Upload privileges to upload files with any file type, enabling client-side attacks.

Affected products

VendorProductAffectedFixed
Business-DNA Solutions TopEase unspecified – ≤ 7.1.27 —

References