CVE-2020-21174 - File Upload vulenrability in liufee CMS v.2.0.7.1 allows a remote attacker to execute arbitrary code via the image suffix function

CRITICAL

File Upload vulenrability in liufee CMS v.2.0.7.1 allows a remote attacker to execute arbitrary code via the image suffix function

Published Jun 20, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 1.31%

File Upload vulenrability in liufee CMS v.2.0.7.1 allows a remote attacker to execute arbitrary code via the image suffix function.

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-1862		Advisory
https://github.com/advisories/GHSA-q3q5-qvh5-cmw5		Advisory
https://github.com/liufee/cms/commit/ecbfb0ca77874ead5b6e79b96a5e1f94e67475a9
https://github.com/liufee/cms/issues/44		ExploitIssue TrackingPatch
https://nvd.nist.gov/vuln/detail/CVE-2020-21174