Executive brief
Unrestricted Upload of File with Dangerous Type in Zenario CMS
Affected products
- Packagist tribalsystems/zenario
Junglewise Threat Intelligence
CVE-2021-42171: Unrestricted Upload of File with Dangerous Type in Zenario CMS
CVE-2021-42171 · Severity: low · CVSS 3.1 · Published 2022-03-15
Technologies: tribalsystems/zenario (Packagist). Vendors: Packagist.
Related threats
- Zenario Cross Site Scripting in the Image library
- Zenario allows authenticated admin users to upload PDF files containing malicious code
- Zenario's Tree Explorer tool from Organizer affected by Cross-site Scripting
- Zenario uses Twig filters insecurely in the Twig Snippet plugin
- Zenario CMS Cross-site Scripting vulnerability