CVE-2024-47579
CVE-2024-47579
Título es
CVE-2024-47579
Mar, 10/12/2024 – 01:15
Tipo
CWE-538
Gravedad 2.0 Txt
Pendiente de análisis
Título en
CVE-2024-47579
Descripción en
An attacker authenticated as an administrator can use an exposed webservice to upload or download a custom PDF font file on the system server. Using the upload functionality to copy an internal file into a font file and subsequently using the download functionality to retrieve that file allows the attacker to read any file on the server with no effect on integrity or availability
10/12/2024
10/12/2024
Vector CVSS:3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Gravedad 3.1 (CVSS 3.1 Base Score)
6.80
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
MEDIUM
Enviar en el boletín
Off
