CVE-2021-32538

9.8 criticalEPSS 2.0%

Critical (9.8) in artware cms project artware cms. EPSS 2.0% chance of exploitation in the next 30 days.

ARTWARE CMS parameter of image upload function does not filter the type of upload files which allows remote attackers can upload arbitrary files without logging in, and further execute code unrestrictedly.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-11-01)
CWE: CWE-434
Published: 2021-07-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

artware_cms_project:artware_cms

References

https://www.twcert.org.tw/tw/cp-132-4850-9b53f-1.html
https://www.twcert.org.tw/tw/cp-132-4850-9b53f-1.html

Check your stack JSON