Pubblicato il 2026-09-20 · Fonte: NVD NIST
An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating HTTP requests to access an unintended controller route from a public survey context and by supplying a crafted file-path/stream parameter during import handling. If successfully exploited, this could allow the attacker to remotely execute arbitrary code on the REDCap server. The attacker does no
Vulnerabilità con punteggio CVSS 9.8 (CRITICAL). Sfruttata attivamente: No.
Vendor: N/A
Prodotti: N/A
Applicare le patch del vendor appena disponibili. Monitorare gli advisory ufficiali.
Vuoi approfondire la cybersecurity? Scopri il libro "Ethical Hacker per Tutti" oppure prenota una lezione online.