Recrystallize Software vulnerabilities
We track 2 vulnerabilities in Recrystallize Software products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 30, 2024.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Recrystallize Software vulnerabilities
- 7.2 High severity
recrystallive_server: Unrestricted Upload of File with Dangerous Type
ReCrystallize Server 5.10.0.0 allows administrators to upload files to the server. The file upload is not restricted, leading to the ability to upload of malicious files. This could result in a Remote Code Execution.
- 7.5 High severity
recrystallize_server: Improper Authentication
ReCrystallize Server 5.10.0.0 uses a authorization mechanism that relies on the value of a cookie, but it does not bind the cookie value to a session ID. Attackers can easily modify the cookie value, within a browser or by implementing client-side code outside