CVE:CVE-2020-7821
CNNVD:CNNVD-202007-133
Library是其中的一个库。
TOBESOFT Nexacro14/17 ExtCommonApiV13 Library 2019.9.6之前版本中存在输入验证错误漏洞。远程攻击者可通过修改注册表路径值利用该漏洞执行任意代码。
solution:Upgrade nexaweb nexacro_14 to a higher version than 2019.9.6,and avoid the version (,2019.9.6); Upgrade nexaweb nexacro_17 to a higher version than 2019.9.6,and avoid the version (,2019.9.6)