← CVE Intelligence

CVE-2021-26630

HANDY Groupware file download and execute vulnerability PUBLISHED

Description (CNA)

Improper input validation vulnerability in HANDY Groupware’s ActiveX moudle allows attackers to download or execute arbitrary files. This vulnerability can be exploited by using the file download or execution path as the parameter value of the vulnerable function.

Affected (CNA)

Vendor / productVersions
Handysoft Co.,Ltd / HANDY Groupwareaffected unspecified through 1.7.4.6
Handysoft Co.,Ltd / HANDY Groupwareaffected unspecified through 2.0.3.6
Handysoft Co.,Ltd / HANDY Groupwareaffected unspecified through 4.0.1.7

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.