VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Oct 30, 2019· Updated Jun 17, 2026

CVE-2019-17322

CVE-2019-17322

Description

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to be written. This can be an executable file that is written to in the arbitrary directory. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page.

Affected products

2
  • Clipsoft/Rexpertllm-fuzzy2 versions
    <=1.0.0.527+ 1 more
    • (no CPE)range: <=1.0.0.527
    • (no CPE)range: 1.0.0.527 and earlier

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.