What’s Vulnerable › Vulnerabilities

CVE-2021-26610: godomall5 remote code execution vulnerability

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-10-27 · updated 2026-06-17
• Weakness: CWE-353

Description

The move_uploaded_file function in godomall5 does not perform an integrity check of extension or authority when user upload file. This vulnerability allows an attacker to execute an remote arbitrary code.

Affected products

• NHN COMMERCE godomall5 Std, godomall5 Pro: through 6; through 9

References

• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36304
• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36304

Get alerted when CVE-2021-26610 or the next vulnerability affects your stack