CVE-2021-42125
EUVD-2021-2911007.12.2021, 14:15
An unrestricted file upload vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to write dangerous files.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ivanti | avalanche | 𝑥 < 6.3.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-502 - Deserialization of Untrusted DataThe application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.
- CWE-434 - Unrestricted Upload of File with Dangerous TypeThe software allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.