CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative datasets-manager-by-arttia-creative.This issue affects Datasets Manager by Arttia Creative: from n/a through <= 1.5.
Explanation of Vulnerability in Simple Terms
Datasets Manager by Arttia Creative versions 1.5 and earlier allow unauthenticated attackers to upload files without restriction. An attacker can upload malicious files to the server over the network without needing credentials or user interaction. This can lead to remote code execution, data theft, or site takeover depending on where uploaded files are stored and executed.
What an attacker can do
Upload malicious files to the server and execute arbitrary code or compromise the site.
Potential impact on your site
Complete site compromise possible; attacker can run code, steal data, or deface the site.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
