Skip to content
OpenAdvisories
High · 7.5 CVE-2022-47186 EUVD-2022-49961GHSA-xmrw-rqq6-xq6g

Unrestricted Upload of File vulnerability in Generex CS141

Published Sep 28, 2023 · Updated Sep 23, 2024 · Assigned by INCIBE

Description

There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version. An attacker could upload and/or delete any type of file, without any format restriction and without any authentication, in the "upload" directory.

Affected products

VendorProductAffectedFixed
Generex UPS CS141 < 2.06 2.06

References