TI-2021-09366 CVE-2021-28132 · GHSA-fjq6-j86c-gqrjLUCY Security Awareness Software through 4.7.x allows unauthenticated remote code…Priority MEDIUM 48LUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution because the Migration Tool (in the Support section) allows upload of .php files within a system.tar.gz file.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03153 · Published 2021-03-11 · No fix listed CWE-78
