Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-7390
9.8
CRITICALCVSS v3
Published
January 27, 2020
CVSS v2
7.5 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before build 80293 allows remote attackers to execute arbitrary code by uploading a file with a jsp extension, then accessing it via a direct request to the file in the webroot.
GitHub