A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can invoke code execution upon uploading a carefully crafted JPEG file as part of the profile avatar.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-07-15T19:04:14
Updated: 2024-08-04T12:04:22.959Z
Reserved: 2020-05-14T00:00:00
Link: CVE-2020-12854
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-07-15T20:15:13.100
Modified: 2024-11-21T05:00:24.960
Link: CVE-2020-12854
Redhat
No data.