V11 - Business Logic
No Antivirus - EICAR file Upload
POC
- In the file upload area, upload test malware file (EICAR)
- Observe that there is no AV installed on the web server that stops uploading EICAR file
Impact
Medium
Likelihood
Low
Cobalt Vulnerability Wiki
