CVE-2020-21861

Summary

CVE-2020-21861 is a file upload vulnerability affecting DuxCMS 2.1. Attackers can exploit this weakness by uploading maliciously crafted files to the duxcms/AdminUpload/upload directory, leading to the execution of arbitrary PHP code. This issue poses a significant risk, as it allows unauthorized users to gain unintended system access and potentially install malware, steal sensitive data, or cause other forms of damage. DuxCMS users are advised to update their systems as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.