← Database

CVE-2021-44093

CRITICAL CVSS: 9.8 Published: 2021-11-28 Modified: 2026-06-17

Description

A Remote Command Execution vulnerability on the background in zrlog 2.2.2, at the upload avatar function, could bypass the original limit, upload the JSP file to get a WebShell

Affected Platforms

Zrlog Zrlog

Weakness Type

CWE-434

References