Arbitrary file upload in Seeyon Internet Software A8+ Collaborative Management
CVE-2019-25714
Seeyon OA A8 contains an unauthenticated arbitrary file write vulnerability in the /seeyon/htmlofficeservlet endpoint that allows remote attackers to write arbitrary files to the web application root by sending specially crafted POST reque…
Vulnerability class: Unrestricted File Upload
EPSS: 0.007 (47.2th percentile) — read the EPSS interpretation.
Affected products
- Seeyon Internet Software A8+ Collaborative Management — versions 7.0, 7.0sp1, 7.0sp2
- Seeyon Internet Software A8-v5 Collaborative Management — versions 6.1sp1
Weakness classification (CWE)
References
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (mitigation, third-party-advisory)
- disclosure@vulncheck.com (third-party-advisory)
- disclosure@vulncheck.com (third-party-advisory)
- disclosure@vulncheck.com (third-party-advisory)