Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Gcdwebserver Project Subscribe
Filtered by product Gcdwebserver
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-14924 1 Gcdwebserver Project 1 Gcdwebserver 2021-07-21 5.0 MEDIUM 7.5 HIGH
An issue was discovered in GCDWebServer before 3.5.3. The method moveItem in the GCDWebUploader class checks the FileExtension of newAbsolutePath but not oldAbsolutePath. By leveraging this vulnerability, an adversary can make an inaccessible file be available (the credential of the app, for instance).