Back to search
CVE-2020-26804
Published: Nov 12, 2020
Modified: Aug 4, 2024
PUBLISHED
Description
In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab. Also, in this page, users can upload attachments with the shared announcements. This "Upload Attachment" functionality is suffered from "Unrestricted File Upload" vulnerability so attacker can upload malicious files using this functionality and control the server.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now