CVE-2021-45834

An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be automatically processed within the product's environment or lead to arbitrary code execution.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-03-18

Last modified

2026-07-09

Weaknesses

CWE-434

Affected products

• Opendocman (Opendocman)

References

• https://github.com/opendocman/opendocman
• https://github.com/opendocman/opendocman/issues/326
• https://github.com/opendocman/opendocman/issues/330