CVE-2019-7216

An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a filter bypass that allows a malicious user to upload any type of file by using % characters within the extension, e.g., file.%ph%p becomes file.php.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
VendorProductVersion
encodablefilechucker
4.99e-free-e02:e
encodablefilechucker
5.09
𝑥
= Vulnerable software versions
References
https://encodable.com/filechucker/changelog/
https://github.com/ekultek/cve-2019-7216
https://encodable.com/filechucker/changelog/
https://github.com/ekultek/cve-2019-7216