An issue was discovered in PRiSE adAS 1.7.0. A file's format is not properly checked, leading to an unrestricted file upload.
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Link | Tags |
---|---|
http://www.adas-sso.com/es/extra/download.php | third party advisory |
https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas | exploit vendor advisory |