Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2021-26630

Improper input validation vulnerability in HANDY Groupware’s ActiveX moudle allows attackers to download or execute arbitrary files. This vulnerability can be exploited by using the file download or execution path as the parameter value of the vulnerable function.

  • Published: May 19, 2022
  • Updated: Apr 14, 2023
  • CVE: CVE-2021-26630
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
handysoft / groupware - 1.7.4.7
handysoft / groupware 2.0.0.0 2.0.3.7
handysoft / groupware 4.0.0.0 4.0.1.8