CVE-2021-36711

Description

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.

Affected Platforms

Weakness Type

CWE-434

References

• http://packetstormsecurity.com/files/167780/OctoBot-WebInterface-0.4.3-Remote-Co…
• https://github.com/Drakkar-Software/OctoBot/blob/master/CHANGELOG.md
• https://github.com/Drakkar-Software/OctoBot/issues/1966
• https://github.com/Nwqda/Sashimi-Evil-OctoBot-Tentacle
• https://packetstormsecurity.com/files/167721/Sashimi-Evil-OctoBot-Tentacle.html
• https://www.octobot.online/