CyberRota Analysis
AI-GeneratedIn Progress ShareFile Storage Zones Controller versions up to 5.12.5 and 6.0.2 are vulnerable due to improper validation in the download preparation flow, allowing authenticated zone administrators to write attacker-controlled files outside the intended directory. This flaw could lead to remote code execution in version 5, posing a significant risk to system integrity. Organizations using these versions, particularly those with elevated administrative privileges, should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In Progress ShareFile Storage Zones Controller versions <= 5.12.5 and <= 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote code execution in v5 versions. Remote code execution is not confirmed on v6 versions.
Related CVEs
Other vulnerabilities affecting the same vendor(s)