Idearespa Reftree
2 CVEs affecting Idearespa Reftree. Latest disclosed: 2022-04-03. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-27249 | High | 8.8 | 2022-04-03 | An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execute arbitrary code by using UploadDwg to… |
CVE-2022-27248 | Medium | 6.5 | 2022-04-03 | A directory traversal vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to download arbitrary .dwg files from a remote server… |