CVE-2019-17322

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-10-30 · updated 2026-06-17
Weakness: CWE-264

Description

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to be written. This can be an executable file that is written to in the arbitrary directory. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page.

Affected products

ClipSoft REXPERT: through 1.0.0.527

References

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35184
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35184

Get alerted when CVE-2019-17322 or the next vulnerability affects your stack