Beveiligingsadvies

CVE-2024-11979

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-11-29 02:12:14

Laatst bijgewerkt 2024-12-03 06:05:57

Toegewezen door twcert

CVSS-score 9.8

Status PUBLISHED

Beschrijving

DreamMaker from Interinfo has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.

← Alle CVE's bekijken Bekijk op cve.org ↗