Beveiligingsadvies

CVE-2024-4825

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-13 11:23:20

Laatst bijgewerkt 2024-08-01 20:55:10

Toegewezen door INCIBE

CVSS-score 9.8

Status PUBLISHED

Beschrijving

A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure.

← Alle CVE's bekijken Bekijk op cve.org ↗