Security Advisory

CVE-2024-4461

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-03 10:52:25

Last updated 2024-08-01 20:40:47

Assigner INCIBE

State PUBLISHED

Description

Unquoted path or search item vulnerability in SugarSync versions prior to 4.1.3 for Windows. This misconfiguration could allow an unauthorized local user to inject arbitrary code into the unquoted service path, resulting in privilege escalation.

← Browse all CVEs View on cve.org ↗