Description
freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| refirio | freo2 | < Ver 2.0.0-alpha-14 | Ver 2.0.0-alpha-14 |