A flaw in the Eptura Archibus Workflow Rule allows an attacker to upload any file, including JSP or JSPX content, and specify any file extension. The uploaded file can then be accessed publicly, enabling an attacker to execute arbitrary code on the server. By chaining this with an existing authentication bypass vulnerability, the attacker can run code without authenticating at all, potentially gaining full control of the system and accessing sensitive data. The weakness corresponds to an unrestricted file upload.

The vulnerability is present in the Eptura Archibus Workflow Rule. No specific version information is provided in the CVE record, so any installation of Archibus that includes this rule is potentially affected until a patch is applied.

The CVSS score is9.6, indicating a critical severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, but the combination of unrestricted upload and an authentication bypass makes exploitation highly attractive and straightforward. An attacker can leverage a web upload interface to deliver malicious code and then execute it as the application’s process, achieving remote code execution without credentials.