high8.1
CVE-2021-26607
An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems.
Impact
An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tobesoft | Nexacro | through 17.1.3.301 |