CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in contentstudio Contentstudio contentstudio allows Upload a Web Shell to a Web Server.This issue affects Contentstudio: from n/a through <= 1.3.7.
Explanation of Vulnerability in Simple Terms
Contentstudio versions up to 1.3.7 allow authenticated administrators to upload files without proper validation. An attacker with high-level privileges can upload malicious files that may affect confidentiality, integrity, and availability of the site. Update to version 1.4.1 or later to remediate this vulnerability.
What an attacker can do
Upload malicious files to the server and potentially execute code or compromise site data.
Potential impact on your site
A compromised admin account could allow file uploads leading to data breach, site defacement, or service disruption.
Conditions required to exploit
Attacker must have administrator-level access to Contentstudio.
Key dates
External resources
Related vulnerabilities
