CyberRota Analysis
AI-GeneratedThe vulnerability arises from improper authentication controls and insufficient file type validation in an ERP system's API endpoint, allowing unauthenticated remote attackers to upload arbitrary files. Successful exploitation can lead to arbitrary code execution, potentially compromising the entire system. Organizations using this ERP system should prioritize patching this critical vulnerability to prevent severe security breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code and compromise the targeted system.