CVE-2021-43100

A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code.
References
Link Resource
https://github.com/diyhi/bbs/issues/51 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:diyhi:bbs:5.3:*:*:*:*:*:*:*

History

No history.

Information

Published : 2022-03-28 22:15

Updated : 2024-02-28 19:09


NVD link : CVE-2021-43100

Mitre link : CVE-2021-43100

CVE.ORG link : CVE-2021-43100


JSON object : View

Products Affected

diyhi

  • bbs
CWE
CWE-434

Unrestricted Upload of File with Dangerous Type