Summary
Sawmill is prone to multiple security vulnerabilities, including unauthorized- access, security-bypass, and cross-site-scripting issues.
Attackers can exploit these issues to gain administrative access to the affected application, execute arbitrary commands, perform unauthorized actions, and steal cookie-based authentication credentials. Other attacks are also possible.
Versions prior to Sawmill 8.1.7.3 are vulnerable.
Solution
Updates are available. Please see the references for details.
References
