CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in sovratecdev Sovratec Case Management sovratec-case-management allows Upload a Web Shell to a Web Server.This issue affects Sovratec Case Management: from n/a through <= 1.0.0.
Explanation of Vulnerability in Simple Terms
Sovratec Case Management versions 1.0.0 and earlier allow unauthenticated attackers to upload arbitrary files to the server without restriction. An attacker can upload malicious files—such as PHP scripts—to execute code on the server, read sensitive data, modify files, or disrupt service. No user interaction or authentication is required.
What an attacker can do
Upload and execute arbitrary files on the server, including malicious code, without authentication.
Potential impact on your site
Complete compromise of the server: attackers can run code, steal data, modify content, or take the site offline.
Conditions required to exploit
Network access to the application. No authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
