CVE-2024-48093

Summary

Unrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to achieve Remote Code Execution via uploading and executing malicious files without validating file extensions or content types.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://youtu.be/rCYIohrQdxM
• https://github.com/yamerooo123/CVE/blob/main/CVE-2024-48093/Description.md

• ←Previous
• Next→