Description
An arbitrary file upload vulnerability was found in Metersphere v1.15.4. Unauthenticated users can upload any file to arbitrary directory, where attackers can write a cron job to execute commands.
Unscored
CVE-2021-45790
EUVD-2021-32508GHSA-8hj2-qp52-8qvm
An arbitrary file upload vulnerability was found in Metersphere v1.15.4. Unauthenticated users can upload any file to arbitrary directory, …
Published Dec 27, 2021 · Updated Aug 4, 2024 · Assigned by mitre