Vulnerability in H5ai Project
CVE-2015-3203
Unrestricted file upload vulnerability in h5ai before 0.25.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified by the href parameter.
EPSS: 0.094 (94.9th percentile) — read the EPSS interpretation.
Affected products
- H5ai_project H5ai
- N/a — versions n/a
References
- secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
- secalert@redhat.com (Exploit, exploit, x_refsource_EXPLOIT-DB)