CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Stacks Stacks Mobile App Builder stacks-mobile-app-builder allows Upload a Web Shell to a Web Server.This issue affects Stacks Mobile App Builder: from n/a through <= 5.2.3.
Explanation of Vulnerability in Simple Terms
Stacks Mobile App Builder versions 5.2.3 and earlier allow unauthenticated attackers to upload arbitrary files to the application without restriction. An attacker can upload malicious files over the network with no special privileges or user interaction required. This can lead to remote code execution, data theft, or complete site compromise.
What an attacker can do
Upload arbitrary files to the application and execute malicious code on the server.
Potential impact on your site
Complete compromise of the application and server; attacker can read, modify, or delete all data.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
