← CVE Intelligence

CVE-2021-26639

WISA Smart Wing CMS File Download Vulnerability PUBLISHED

Description (CNA)

This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system.

Affected (CNA)

Vendor / productVersions
WISA corp. / Smart Wing CMSaffected unspecified before r18715.20211229

CWE

CWE-494, CWE-20

References

ADP enrichment

CVE

No English description supplied.