CVE-2020-7874 — NEXACRO14 Runtime arbitrary file download and execution vulnerability
Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and exec…
Published: 2021-09-09 · CVSS: 8.8 · CVSS 3.1
Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. This vulnerability is due to incomplete validation of file download URL or file extension.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7