Harsh iSpring Embedder is a software tool used to embed interactive content into web pages. This vulnerability allows attackers to upload malicious files to a web server by tricking users into clicking on a malicious link or submitting a malicious form.
Affected versions: 1.0 If you don't recognise this software, you're probably not affected.
Upgrade to Harsh iSpring Embedder version 1.1 or later from the official website.
- Immediate mitigations:
- Disable the embedder by commenting out the relevant configuration file lines.
- Review and audit all embedded content for suspicious activity.