Skip to content
OpenAdvisories
Critical · 10.0 CVE-2024-0643 EUVD-2024-16435GHSA-gh84-qgjx-4xm7

Unrestricted upload of dangerous file types in C21 Live Encoder and Live Mosaic

Published Jan 17, 2024 · Updated Jun 2, 2025 · Assigned by INCIBE

Description

Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise.

Affected products

VendorProductAffectedFixed
Cires21 C21 Live Encoder and Live Mosaic 5.3 —

References