CVE-2024-0916

Summary

Unauthenticated file upload allows remote code execution. This issue affects UvDesk Community: from 1.0.0 through 1.1.3.

Affected Software

Weaknesses

• CWE-434: CWE-434 Unrestricted Upload of File with Dangerous Type

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/uvdesk/core-framework/pull/706
• https://pentraze.com/vulnerability-reports/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://github.com/uvdesk/core-framework/pull/706
• https://pentraze.com/vulnerability-reports/

• ←Previous
• Next→