Arbitrary file upload
Named by 4 kept items in this workspace.
2 items name it under classification.key entities and 2 under techniques.
Search every workspace for Arbitrary file upload. It matches the name as written, so it can find other things that share it.
The items that name it 4
Unauthenticated attacker sends crafted requests to plant files the appliance would otherwise reject, because internal messaging components do not confirm that messages come from a legitimate source
Image field with no extension check used to achieve host RCE (uid=1001, gid=root)
All techniques in this workspace.