This vulnerability in halfdata Green Downloads permits an attacker with low privileges to upload files of dangerous types without restriction. The vulnerability affects versions up to and including 2.08. The CVSS 3.1 base score is 9.9, indicating critical severity with network attack vector, low attack complexity, low privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability. No official patch or remediation information is provided in the available data.

Successful exploitation can lead to full system compromise, including unauthorized disclosure, modification, or destruction of data and disruption of service. The vulnerability allows attackers to upload malicious files that may be executed or otherwise leveraged to gain control over the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict file upload permissions to trusted users only and implement additional file validation or filtering controls where possible to reduce risk.