CVE-2020-29441 - An issue was discovered in the Upload Widget in OutSystems Platform 10 before 10.0.1019.0

Back Back to CVE browser

HIGH

An issue was discovered in the Upload Widget in OutSystems Platform 10 before 10.0.1019.0

Published Nov 30, 2020

7.2

HIGH

CVSS 3.1

EPSS 0.95%

Description

An issue was discovered in the Upload Widget in OutSystems Platform 10 before 10.0.1019.0. An unauthenticated attacker can upload arbitrary files. In some cases, this attack may consume the available database space (Denial of Service), corrupt legitimate data if files are being processed asynchronously, or deny access to legitimate uploaded files.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-21814
Advisory
https://success.outsystems.com/Support/Security/Vulnerabilities/Vulnerability_RPD-4310
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-21814		Advisory
https://success.outsystems.com/Support/Security/Vulnerabilities/Vulnerability_RPD-4310		x_refsource_MISCVendor Advisory