Software Repository Management
Monthly
Unrestricted file upload in TRtek Software Repository Management (all versions before commit 2fb4acee) lets remote attackers upload executable web shells to the server, yielding server-side code execution. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) indicates network-reachable exploitation with no authentication or user interaction, and the full C:H/I:H/A:H impact reflects total server compromise. It was reported by Turkey's national CERT (TR-CERT); there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unrestricted file upload in TRtek Software Repository Management (all versions before commit 2fb4acee) lets remote attackers upload executable web shells to the server, yielding server-side code execution. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) indicates network-reachable exploitation with no authentication or user interaction, and the full C:H/I:H/A:H impact reflects total server compromise. It was reported by Turkey's national CERT (TR-CERT); there is no public exploit identified at time of analysis and it is not listed in CISA KEV.