Summar Software Portal del Empleado Unrestricted File Upload Vulnerability

A vulnerability allowing unrestricted upload of dangerous file types has been identified in Summar Software's Portal del Empleado, versions prior to 3.98.0. This issue arises from the ability to send a POST request with the parameter 'cctl00$ContentPlaceHolder1$fuAdjunto' to the '/MemberPages/ntf_absentismo.aspx' page, facilitating the upload of malicious files.

Impact

Exploitation of this vulnerability could lead to the upload of harmful files, potentially allowing for further attacks such as executing malicious code or causing a denial-of-service.

Remediation

Users are advised to update to Summar Software Portal del Empleado version 3.98.0.