CVE-2021-44159: 4mosan Gcb Doctor

Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days.

4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack.

Affected products

• 4mosan Gcb Doctor: before 2021-09-16 (fixed in 2021-09-16)

Published 2021-12-20. Last modified 2026-06-17.