Vulnerabilities > Xerte
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-02-24 | CVE-2021-44664 | Unrestricted Upload of File with Dangerous Type vulnerability in Xerte An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in website_code/php/import/fileupload.php by uploading a maliciously crafted PHP file though the project interface disguised as a language file to bypasses the upload filters. | 8.8 |
| 2022-02-24 | CVE-2021-44665 | Path Traversal vulnerability in Xerte A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php. | 6.5 |