CVE-2017-7281
An issue was discovered in Unitrends Enterprise Backup before 9.1.2. A lack of sanitization of user input in the createReportName and saveReport functions in recoveryconsole/bpl/reports.php allows for an authenticated user to create a randomly named file on disk with a user-controlled extension, contents, and path, leading to remote code execution, aka Unrestricted File Upload.
- Affected products
- Unitrends Enterprise Backup
- Unitrends Enterprise Backup
- ≤ 9.1.1
- Fix
- Available
- CVSS 3.0
- 8.8 HIGH
- EPSS
- 3.4% (88th percentile)
- Weakness
- CWE-434
- NVD status
- Modified
- Published
- 2017-04-12
CVE-2017-7281 at NVD
1 known exploit for CVE-2017-7281
Proof-of-concept code and exploit modules indexed by Sploitus