EUVD-2026-89681
GHSA-p57c-rwjq-vc7c
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Remote network upload with low complexity but requiring high-privilege authentication (PR:H); web shell yields full C/I/A on the server with no scope change (S:U).
Primary rating from Vendor (twcert).
CVSS VectorVendor: twcert
Lifecycle Timeline
2DescriptionCVE.org
EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
AnalysisAI
Authenticated administrative users of Digiwin EasyFlow .NET can exploit an arbitrary file upload vulnerability to place and execute .NET web shell backdoors, achieving remote code execution on the server. The CVSS 4.0 base score is 8.6, but the high privilege requirement (PR:H) confines risk to insider threats or cases where admin credentials are already compromised. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to already possess high-privilege (administrative) authenticated access to the Digiwin EasyFlow .NET application, per PR:H - this is the primary limiting factor and rules out anonymous internet attackers. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 base score of 8.6 is driven by full compromise of confidentiality, integrity and availability (VC:H/VI:H/VA:H) over a network vector with low complexity, but the critical mitigating factor is PR:H - exploitation requires the attacker to already hold high (privileged/administrative) credentials on the EasyFlow .NET application. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch has been identified at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Digiwin EasyFlow .NET administrative accounts, disable unused or shared admin credentials, enforce MFA, restrict management interfaces to trusted networks, and deploy WAF or file-upload inspection rules to block .NET web shell uploads; note that no vendor-released patch identified at time of analysis. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Easyflow Net
View allSQL Injection in Digiwin EasyFlow .NET enables unauthenticated remote attackers to execute arbitrary SQL commands agains
Critical SQL injection in Digiwin EasyFlow .NET allows unauthenticated remote attackers to execute arbitrary SQL command
Unauthenticated remote attackers can retrieve other users' plaintext passwords from Digiwin EasyFlow .NET via a specific
Unauthenticated remote code execution affects Digiwin EasyFlow .NET, which deserializes attacker-supplied serialized con
Session fixation in Digiwin EasyFlow .NET allows unauthenticated remote attackers to pre-set a victim's session identifi
Arbitrary file read in Digiwin EasyFlow .NET allows an authenticated remote user to download files from the underlying h
SQL injection in Digiwin EasyFlow .NET allows an authenticated, low-privilege remote user to read arbitrary contents of
Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately fi
Reflected cross-site scripting in Digiwin EasyFlow .NET allows unauthenticated remote attackers to execute arbitrary Jav
Stored Cross-Site Scripting in Digiwin's EasyFlow .NET workflow platform enables authenticated low-privilege attackers t
Share
External POC / Exploit Code
Leaving vuln.today