critical9.8

CVE-2021-35261

File Upload Vulnerability in Yupoxion BearAdmin before commit 10176153528b0a914eb4d726e200fd506b73b075 allows attacker to execute arbitrary remote code via the…

Impact

File Upload Vulnerability in Yupoxion BearAdmin before commit 10176153528b0a914eb4d726e200fd506b73b075 allows attacker to execute arbitrary remote code via the Upfile function of the extend/tools/Ueditor endpoint.

Affected products

Vendor	Product	Affected versions
Bearadmin Project	Bearadmin	All versions

Weakness classification

CWE-434

References

NVD record
CVE.org record
https://github.com/yupoxiong/BearAdmin/issues/16
https://github.com/yupoxiong/BearAdmin/issues/16