CyberRota Analysis
AI-GeneratedA vulnerability exists in a webserver endpoint that allows an attacker to exploit the filename parameter in the Content-Disposition header, enabling arbitrary file writes. This can lead to denial of service by overwriting critical system files or remote code execution by modifying executable shell scripts. Organizations using this webserver should prioritize remediation to mitigate potential exploitation risks.
Original NVD Description
A POST request sent to a specific webserver endpoint can be used to write to arbitrary file locations. The endpoint accepts the filename parameter in the Content-Disposition header without verification. This can be used to cause a denial of service by overwriting system files, or remote-code-execution by overwriting shell-scripts which execution can be triggered through other means.