Vulnerability Details CVE-2021-3745
flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.6%
CVSS Severity
CVSS v3 Score 8.0
CVSS v2 Score 6.0
References
- https://github.com/flatcore/flatcore-cms/commit/5cc3937b6bc38293ec921a5cf00018b48b668dc6
- https://huntr.dev/bounties/7879ab3d-8018-402a-aa0b-131bdbd1966c
- https://github.com/flatcore/flatcore-cms/commit/5cc3937b6bc38293ec921a5cf00018b48b668dc6
- https://huntr.dev/bounties/7879ab3d-8018-402a-aa0b-131bdbd1966c
Products affected by CVE-2021-3745
-
cpe:2.3:a:flatcore:flatcore-cms:1.0
-
cpe:2.3:a:flatcore:flatcore-cms:1.1
-
cpe:2.3:a:flatcore:flatcore-cms:1.1.1
-
cpe:2.3:a:flatcore:flatcore-cms:1.3
-
cpe:2.3:a:flatcore:flatcore-cms:1.4
-
cpe:2.3:a:flatcore:flatcore-cms:1.4.5
-
cpe:2.3:a:flatcore:flatcore-cms:1.4.6
-
cpe:2.3:a:flatcore:flatcore-cms:1.4.7
-
cpe:2.3:a:flatcore:flatcore-cms:1.4.7.4
-
cpe:2.3:a:flatcore:flatcore-cms:1.5
-
cpe:2.3:a:flatcore:flatcore-cms:1.5.3
-
cpe:2.3:a:flatcore:flatcore-cms:1.5.4
-
cpe:2.3:a:flatcore:flatcore-cms:1.5.5
-
cpe:2.3:a:flatcore:flatcore-cms:1.5.7
-
cpe:2.3:a:flatcore:flatcore-cms:2.0
-
cpe:2.3:a:flatcore:flatcore-cms:2.0.1
-
cpe:2.3:a:flatcore:flatcore-cms:2.0.5
-
cpe:2.3:a:flatcore:flatcore-cms:2.0.6
-
cpe:2.3:a:flatcore:flatcore-cms:2.0.7
-
cpe:2.3:a:flatcore:flatcore-cms:2.0.8
-
cpe:2.3:a:flatcore:flatcore-cms:2.0.9