CVE-2021-43102

2022-03-2821:25:37

mitre

www.cve.org

file upload

bbs 5.3

helpmanageaction.java

gettype function

arbitrary code

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

47.3%

JSON

A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code.

References

github.com/diyhi/bbs/issues/51