CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Syarif Mobile App Editor mobile-app-editor allows Upload a Web Shell to a Web Server.This issue affects Mobile App Editor: from n/a through <= 1.3.1.
Explanation of Vulnerability in Simple Terms
Mobile App Editor versions up to 1.3.1 allow authenticated administrators to upload files without proper validation. An attacker with high-level privileges can upload malicious files that may affect confidentiality, integrity, and availability across the application. The vulnerability requires administrative access but has broad impact due to changed scope.
What an attacker can do
Upload malicious files to compromise the application's confidentiality, integrity, and availability.
Potential impact on your site
An admin account compromise could allow file uploads that affect the entire application and potentially connected systems.
Conditions required to exploit
Attacker must have high-level administrative privileges; no user interaction required.
Key dates
External resources
Related vulnerabilities
