CVE-2021-23562

MEDIUM

Arbitrary File Upload

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-23562 has a selected CVSS score of 4.2 (medium).

Description

This affects the package plupload before 2.3.9. A file name containing JavaScript code could be uploaded and run. An attacker would need to trick a user to upload this kind of file.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Feb 18, 2013 · VulnCheck
Reported exploitation
Observed · VulnCheck

Affected products and versions

3
ProductSourceVersion range

plupload

CVE ListBefore 2.3.9affected

plupload

Browse tiny / plupload
VulnCheckVersion data not supplied

plupload

Browse npm / plupload
GitHub AdvisoryBefore 2.3.9 · Fixed in 2.3.9affected

References

8