Arbitrary File Upload Vulnerability in Feehi CMS by Liu Fee
CVE-2020-21322

9.8CRITICAL

Key Information:

Vendor

Feehi

Status
Feehicms
Vendor
CVE Published:
15 September 2021

What is CVE-2020-21322?

An arbitrary file upload vulnerability exists in Feehi CMS v2.0.8 and earlier, enabling attackers to upload malicious PHP files. This flaw can lead to unauthorized remote code execution, allowing intruders to compromise the application's security and potentially gain full control over the server environment. It is crucial for users of affected versions to apply security patches and updates to prevent exploitation.

References

https://github.com/liufee/cms/issues/44
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.