CVE-2021-38697

SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extension which can lead to arbitrary code execution.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-01-18

Last modified

2024-08-04

Weaknesses

CWE-434

Affected products

• Saraban (Softvibe)

References

• http://www.infoma.net/index.php/saraban/
• https://orangeo.tech/post/2021/12/24/First-CVEs.html
• https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US
• https://sawatdee.github.io/post/2021/12/24/First-CVEs.html