EUVD-2026-64707
GHSA-q3pc-8mvq-c8v3
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated network upload with no complexity, but scope change and required victim interaction to achieve XSS impact; no confidentiality, integrity, or availability impact on the vulnerable server itself.
Primary rating from Vendor (twcert).
CVSS VectorVendor: twcert
Lifecycle Timeline
2DescriptionCVE.org
NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, thereby achieving effects similar to cross-site scripting.
AnalysisAI
Arbitrary file upload in NewSiteServer (NSS) by CyberTutor allows unauthenticated remote attackers to store malicious HTML files on the server, producing stored XSS-equivalent effects against users who subsequently access those files. All known versions are affected per EUVD and CPE wildcard data; the upload endpoint requires no authentication. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The NSS file upload endpoint must be reachable over the network without authentication - this is the default posture for all known versions (AV:N/PR:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 base score of 5.1 (Medium) reflects a network-accessible, low-complexity, unauthenticated path (AV:N/AC:L/AT:N/PR:N) moderated by an active user interaction requirement (UI:A) - a victim must deliberately navigate to the attacker-controlled URL before harm occurs. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch version has been independently confirmed from the TWCERT advisories referenced in this dataset; operators should consult https://www.twcert.org.tw/tw/cp-132-11116-2c1d8-1.html and https://www.twcert.org.tw/en/cp-139-11120-64c52-2.html directly for the latest fix status. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Newsiteserver Nss
View allShare
External POC / Exploit Code
Leaving vuln.today