CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Upload a Web Shell to a Web Server.This issue affects 3D Work In Progress: from n/a through <= 1.0.3.
Explanation of Vulnerability in Simple Terms
3D Work In Progress versions up to 1.0.3 allow authenticated users to upload files without proper validation. An attacker with low-level access can upload malicious files that may execute on the server or be accessed by other users. The vulnerability affects confidentiality, integrity, and availability of the site.
What an attacker can do
Upload malicious files to the server and potentially execute code or compromise site data.
Potential impact on your site
Compromised site security; attackers can run code, steal data, or disrupt service if they gain any user account.
Conditions required to exploit
Attacker must have a low-privilege user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
