CVE-2022-27249

ALTO 8.8CVE-2022-27249 · Published 03/04/2022 · updated 17/06/2026

In breve

CVE-2022-27249 è una vulnerabilità ALTO (CVSS 8.8) che riguarda reftree (idearespa).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.9%, superiore al 92.2% delle vulnerabilità.
Correzione: aggiornare a 2021.09.17 o successiva.

Package	Affected versions	Patched versions
reftree idearespa	`< 2021.09.17`	`2021.09.17`

Description

An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execute arbitrary code by using UploadDwg to upload a crafted aspx file to the web root, and then visiting the URL for this aspx resource.

References

packetstormsecurity.com/files/166559/IdeaRE-RefTree-Shell-Upload.html · Exploit
idearespa.eu · Product

Altre vulnerabilità di reftree

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free