Executive Summary

The vulnerability exists in the Wertheim SafeController Software, version 6.15.8328.28014, specifically in the /safe/contract/uploadcustomdocuments endpoint. The software performs insufficient server-side validation of uploaded file types by relying on the user-controlled HTTP Content-Type header. It accepts files if the Content-Type contains allowed strings like pdf, jpeg, tiff, or png. However, an authenticated attacker with any role or permission level can spoof this Content-Type value and upload arbitrary file content, bypassing proper validation.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows an authenticated attacker to upload arbitrary files by spoofing the Content-Type header. This could lead to unauthorized file uploads that may contain malicious content, potentially resulting in further exploitation such as code execution, data compromise, or disruption of service depending on how the uploaded files are handled by the application.

Useful 0 Not Useful 0