An authenticated file upload vulnerability in CIPPlanner CIPAce version 9.17 and earlier allows attackers to achieve remote code execution on the underlying server.

This vulnerability involves the unrestricted upload of dangerous file types within the rich text editor and document management modules. An authorized user can upload malicious executable files that may be executed if the storage directory lacks proper restrictive permissions.

Successful exploitation of this flaw allows an authenticated attacker to execute arbitrary code on the server, potentially leading to a full system compromise. Given the CVSS score of 8.8, this vulnerability represents a high risk to data integrity, system availability, and the confidentiality of sensitive information stored within the CIPAce environment.

Immediate Action: Update CIPPlanner CIPAce to version 9.17 or later immediately to resolve the unrestricted file upload flaw.

Proactive Monitoring: Review web server logs for suspicious file upload activity, particularly requests targeting the rich text editor or document management endpoints.

Compensating Controls: Implement strict file type validation and restrict execution permissions on directories used for document storage to prevent the execution of uploaded scripts.

Public Exploit Available: No — there is no confirmed public exploit available.

Organizations utilizing CIPPlanner CIPAce should prioritize updating to version 9.17 to eliminate this vulnerability. Until updates are applied, administrators should restrict access to the application to trusted users and ensure that storage directories are configured to disallow the execution of uploaded files.