1. Home
  2. CVE Database
  3. CVE-2021-20104
HIGH · 8.1

CVE-2021-20104

Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization of file attachments uploaded with forms through upload.php.

Vulnerability Description

Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization of file attachments uploaded with forms through upload.php.

CVSS Score

8.1

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
MachformMachform< 16

Related Weaknesses (CWE)

CWE-434

References

FAQ

What is CVE-2021-20104?

CVE-2021-20104 is a vulnerability with a CVSS score of 8.1 (HIGH). Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization of file attachments uploaded with forms through upload.php.

How severe is CVE-2021-20104?

CVE-2021-20104 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-20104?

Check the references section above for vendor advisories and patch information. Affected products include: Machform Machform.