CVE-2024-7705
CVE-2024-7705
Título es
CVE-2024-7705
Lun, 12/08/2024 – 23:15
Tipo
CWE-434
Gravedad v2.0
5.80
Gravedad 2.0 Txt
MEDIUM
Título en
CVE-2024-7705
Descripción en
A vulnerability was found in Fujian mwcms 1.0.0. It has been declared as critical. Affected by this vulnerability is the function uploadeditor of the file /uploadeditor.html?action=uploadimage of the component Image Upload. The manipulation of the argument upfile leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
13/08/2024
13/08/2024
Vector CVSS:3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Vector CVSS:2.0
AV:N/AC:L/Au:M/C:P/I:P/A:P
Gravedad 3.1 (CVSS 3.1 Base Score)
4.70
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
MEDIUM
Referencias
Enviar en el boletín
Off
