Security Advisory

CVE-2020-12854

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-07-15 19:04:14
Last updated 2024-08-04 12:04:22
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can invoke code execution upon uploading a carefully crafted JPEG file as part of the profile avatar.