TI-2018-03762 CVE-2018-5203 · GHSA-wwgp-jqvc-gmm4Improper input validation in Devpia DEXTUploadX5Priority MEDIUM 47DEXTUploadX5 version Between 1.0.0.0 and 2.2.0.0 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method.CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0234 · Published 2018-12-28 · No fix listed CWE-20