CVE-2019-15123

—

CVSS 3.1

7.2 high

EPSS

2%p83

Published

Jun 12, 2020 (Jun 12, 2020)

Modified

Jun 17, 2026

Description

The Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on the website. An attacker could use this to upload a malicious .aspx file and gain Remote Code Execution on the site.

Vendors: vikisolutions
Products: vera
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news0 stories

No ingested article mentions this CVE yet.