An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.
Targets the file upload endpoint in Aviatrix Controller 6.x before 6.5-1804.1922, allowing unauthenticated attackers to upload arbitrary files and achieve remote code execution via directory traversal.
Used 2.6k times · 5.9k assets checked · domain, ipv4, subdomain
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →