Biztalk360 vulnerabilities
2 known vulnerabilities in Biztalk360 from Kovai. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
8.6average CVSS score
Latest first
- 8.3 High severity
Biztalk360: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in Biztalk360 before 11.5. Because of mishandling of user-provided input in an upload mechanism, an authenticated attacker is able to write files outside of the destination directory and/or coerce an authentication from the service, aka
- 8.8 High severity
Biztalk360: Unrestricted Upload of File with Dangerous Type
An issue was discovered in Biztalk360 before 11.5. Because of incorrect access control, any user is able to request the loading a DLL file. During the loading, a method is called. An attacker can craft a malicious DLL, upload it to the server, and use it to ac