cbcvebase.

Lucysecurity Security Awareness vulnerabilities

1 known vulnerability affecting lucysecurity/security_awareness.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2021-28132P2CRITICALCVSS 9.8≤ 4.7.82021-03-11
CVE-2021-28132 [CRITICAL] CWE-78 CVE-2021-28132: LUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution because LUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution because the Migration Tool (in the Support section) allows upload of .php files within a system.tar.gz file. The .php file becomes accessible with a public/system/static URI.
nvd
Lucysecurity Security Awareness vulnerabilities | cvebase