Skip to main content

Fogproject CVE-2021-32243

HIGH
Unrestricted Upload of File with Dangerous Type (CWE-434)
2021-06-16 cve@mitre.org
File Upload Fogproject
8.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.8 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Jun 16, 2021 - 21:15 nvd
HIGH 8.8

DescriptionNVD

FOGProject v1.5.9 is affected by a File Upload RCE (Authenticated).

AnalysisAI

FOGProject v1.5.9 is affected by a File Upload RCE (Authenticated). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Unrestricted File Upload (CWE-434), which allows attackers to upload malicious files that can be executed on the server. FOGProject v1.5.9 is affected by a File Upload RCE (Authenticated). Affected products include: Fogproject.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate file types server-side, store uploads outside webroot, use random filenames, scan for malware.

More in Fogproject

View all
CVE-2025-58443 CRITICAL POC
9.9 Sep 06

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Rated critical severity (CVSS 9.9),

CVE-2024-39914 CRITICAL POC
9.8 Jul 12

FOG is a cloning/imaging/rescue suite/inventory management system. Rated critical severity (CVSS 9.8), this vulnerabilit
CVE-2024-40645 HIGH POC
8.8 Jul 31

FOG is a cloning/imaging/rescue suite/inventory management system. Rated high severity (CVSS 8.8), this vulnerability is
CVE-2024-42348 HIGH POC
8.6 Aug 02

FOG is a cloning/imaging/rescue suite/inventory management system. Rated high severity (CVSS 8.6), this vulnerability is
CVE-2024-41954 HIGH POC
7.8 Jul 31

FOG is a cloning/imaging/rescue suite/inventory management system. Rated high severity (CVSS 7.8), this vulnerability is
CVE-2024-34477 HIGH POC
7.8 May 27

configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafte
CVE-2024-41108 MEDIUM POC
5.9 Jul 31

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Rated medium severity (CVSS 5.9), th
CVE-2024-42349 MEDIUM POC
5.3 Aug 02

FOG is a cloning/imaging/rescue suite/inventory management system. Rated medium severity (CVSS 5.3), this vulnerability

CVE-2026-47687 HIGH
8.7 Jul 21

Stored cross-site scripting in FOG Project's inventory reporting pipeline allows an unauthenticated network attacker to

CVE-2026-47685 HIGH
8.7 Jul 21

Stored XSS in FOG Project's unauthenticated inventory endpoint allows network-accessible attackers to inject persistent

CVE-2026-47688 HIGH
8.2 Jul 21

Missing authorization in FOG Project (fogproject) before 1.5.10.1832 and 1.6.0-beta.2313 lets a remote unauthenticated a
CVE-2014-3111 LOW POC
3.5 Oct 21

Multiple cross-site scripting (XSS) vulnerabilities in FOG 0.27 through 0.32 allow remote authenticated users to inject

Same weakness CWE-434 – Unrestricted Upload of File with Dangerous Type

View all
CVE-2016-3088 CRITICAL POC
9.8
CVE-2021-31207 MEDIUM POC
6.6
CVE-2017-12617 HIGH POC
8.1
CVE-2024-50623 CRITICAL POC
9.8
CVE-2017-11357 CRITICAL POC
9.8
CVE-2017-12615 HIGH POC
8.1
CVE-2018-9206 CRITICAL POC
9.8
CVE-2024-5084 CRITICAL POC
9.8

Same technique File Upload

View all
CVE-2016-3088 CRITICAL POC
9.8
CVE-2017-12617 HIGH POC
8.1
CVE-2020-1938 CRITICAL POC
9.8
CVE-2024-50623 CRITICAL POC
9.8
CVE-2017-11357 CRITICAL POC
9.8
CVE-2017-12615 HIGH POC
8.1
CVE-2018-9206 CRITICAL POC
9.8
CVE-2024-5084 CRITICAL POC
9.8

Share

CVE-2021-32243 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy