CVE-2021-28023

Arbitrary file upload in Service import feature in ServiceTonic Helpdesk software version < 9.0.35937 allows a malicious user to execute JSP code by uploading a zip that extracts files in relative paths.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-11-08

Last modified

2024-08-03

Weaknesses

CWE-434

Affected products

• Servicetonic (Servicetonic)

References

• https://www.servicetonic.com/
• https://www.srlabs.de/bites/chaining-three-zero-day-exploits-in-itsm-software-servicetonic-for-remote-code-execution