CVE-2021-45834: Opendocman

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be automatically processed within the product's environment or lead to arbitrary code execution.

Affected products

• Opendocman Opendocman: version 1.4.4 only

Published 2022-03-18. Last modified 2026-07-09.