Security Advisory

CVE-2021-26612

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-11-30 18:39:25
Last updated 2024-08-03 20:26:25
Assigner krcert
CVSS score 8.1
State PUBLISHED

Description

An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute arbitrary command after the file creation included malicious code.