Design/Logic Flaw

2021-05-1816:15:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.5%

In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files.

CPENameOperatorVersion
pluckeq4.7.10 dev2

CPE	Name	Operator	Version
	pluck	eq	4.7.10 dev2

References

cwe.mitre.org/data/definitions/434.html

github.com/pluck-cms/pluck/issues/84