EUVD-2026-65702
GHSA-4wpm-f9xp-x65x
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable endpoint requiring only a valid low-privileged account; no confidentiality or availability impact confirmed, only high integrity write.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
2DescriptionCVE.org
ContiNew Admin fails to apply file-upload permission checks or file-type allowlist validation to multipart upload endpoints, allowing authenticated users to store files with arbitrary extensions. Attackers can initialize chunked uploads, send file parts, and complete uploads to leave arbitrary files in the storage backend accessible via web server URLs.
AnalysisAI
Unrestricted file upload in ContiNew Admin through v4.1.0 allows authenticated users to bypass server-side validation entirely on multipart upload endpoints, storing files with arbitrary extensions in the backend storage. The flaw stems from missing permission checks and the absence of any file-type allowlist in MultipartUploadController.java, meaning a low-privileged account holder can upload content such as server-side scripts. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | A valid authenticated session with at minimum a low-privileged user account is required - the CVSS PR:L metric confirms this. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) confirms low-complexity network exploitation requiring only a valid low-privileged account - no special attack prerequisites beyond authentication. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with any valid low-privileged account sends a multipart upload initiation request to the upload endpoint, follows with file-part POST requests carrying a crafted .jsp webshell payload, and completes the chunked upload sequence. The assembled file is stored in the backend and becomes directly accessible at its web server URL, at which point the attacker issues an HTTP GET to the file path to trigger execution and obtain a remote shell as the application server's process identity. |
| Remediation | No vendor-released patched version is independently confirmed in the available data; the VulnCheck advisory and GitHub issue #221 (https://github.com/continew-org/continew-admin/issues/221) should be monitored for an official fix release. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify all production instances of ContiNew Admin running version 4.1.0 or earlier and review file-upload audit logs for suspicious activity or unexpected files; quarantine any files with executable extensions (.php, .jsp, .asp, etc.) discovered in upload directories. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Continew Admin
View allA vulnerability, which was classified as problematic, was found in ContiNew Admin up to 3.6.0. Rated medium severity (CV
A vulnerability was found in ContiNew Admin 3.2.0 and classified as critical. Rated medium severity (CVSS 5.1), this vul
A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Rated medium severity (CVSS
Same technique File Upload
View allShare
External POC / Exploit Code
Leaving vuln.today