Vulnerabilitycritical
File Transfer Threats: Risk Factors and How Network Traffic Visibility Can Help
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-5638 | Unauthenticated RCE in Apache Struts Jakarta Multipart parser | 9.8 | 100% | KEVRansomwarePoC ×10 | KEV |
| CVE-2020-11451 | The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files with arbitrary… | 7.2 | 3% | PoC ×2 | |
| CVE-2020-24984 | Quadbase EspressReports ES 7 Update 9: It allows CSRF, whereby an attacker may be able to trick an authenticated admin level user into uploading malicious files to the… | 8.8 | <1% | PoC | |
| CVE-2020-29071 | An XSS issue was found in the Shares feature of LiquidFiles before 3.3.19 | 9.0 | 2% | PoC | |
| CVE-2020-35852 | Chatbox is affected by cross-site scripting (XSS) | 6.1 | 1% | PoC | |
| CVE-2020-36283 | HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode) | 8.8 | <1% | ||
| CVE-2021-24142 | Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when… | 7.2 | 1% | ||
| CVE-2021-24144 | Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject… | 7.8 | 1% | ||
| CVE-2021-25277 | FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component | 6.1 | <1% | PoC | |
| CVE-2021-25292 | An issue was discovered in Pillow before 8.1.1 | 6.5 | 2% |
From the original article
6 min read at unit42.paloaltonetworks.com
File transfers (i. e. , upload and download) are vital for organizations and their employees’ productivity.
By Saeed Abbasi · unit42.paloaltonetworks.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.