CVE-2024-24202
An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attac...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary code via uploading a crafted .txt file.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web clammy-blizzard-8ef.notion.site