CVE Vulnerability

CVE-2020-29441

An issue was discovered in the Upload Widget in OutSystems Platform 10 before 10.0.1019.0. An unauthenticated attacker can upload arbitrary files. In some cases, this attack may consume the available database space (Denial of Service), corrupt legitimate data if files are being processed asynchronously, or deny access to legitimate uploaded files.

6.4 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 4.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

6.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://success.outsystems.com/Support/Security/Vulnerabilities/Vulnerability_RPD-4310 Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:outsystems:outsystems:*:*:*:*:*:*:*:*
Information

Published : 2020-11-30 10:15

Updated : 2020-12-04 06:06

NVD link : CVE-2020-29441

Mitre link : CVE-2020-29441

Products Affected
No products.
CWE
CWE-434