CVE-2021-47667 | THREATINT

Description

An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthenticated remote attackers to execute arbitrary commands via shell metacharacters in the tmp_name parameter when dropping off a file via a POST /dropoff request.

Reserved 2025-04-05 | Published 2025-04-05 | Updated 2025-04-07 | Assigner mitre

CRITICAL: 10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Problem types

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Product status

Default status

unaffected

5.24-3 before 6.10-7

affected

References

projectblack.io/blog/zendto-nday-vulnerabilities/

cve.org (CVE-2021-47667)

nvd.nist.gov (CVE-2021-47667)

Download JSON