CVE-2024-25994

Publication date

2024-03-12 08:10:46

Family

CERTVDE

State

PUBLISHED

Description

An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload destination is fixed and is write only.