Arbitrary File Upload Vulnerability in Textpattern by Textpattern
CVE-2021-30209

6.5MEDIUM

Key Information:

Vendor

Textpattern

Status
Textpattern
Vendor
CVE Published:
15 April 2021

What is CVE-2021-30209?

Textpattern V4.8.4 is vulnerable to arbitrary file upload, allowing a malicious plug-in to be uploaded without proper security checks. This weakness can potentially allow attackers to gain unauthorized access and exploit system permissions, which poses a significant risk to the integrity and confidentiality of the affected systems.

References

https://github.com/textpattern/textpattern/issues/1655
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.