CVE-2021-26610

8.8 highEPSS 0.5%

High (8.8) in nhn-commerce godomall5. EPSS 0.5% chance of exploitation in the next 30 days.

The move_uploaded_file function in godomall5 does not perform an integrity check of extension or authority when user upload file. This vulnerability allows an attacker to execute an remote arbitrary code.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWEs: CWE-345, CWE-353
Published: 2021-10-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nhn-commerce:godomall5

References

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36304
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36304

Check your stack JSON