Security Advisory

CVE-2024-24202

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-02-08 00:00:00
Last updated 2024-08-19 20:00:47
Assigner mitre
State PUBLISHED

Description

An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary code via uploading a crafted .txt file.