CVE-2024-37879
Improper input validation in /admin/config/save in User-friendly SVN (USVN) before v1.0.12 and below allows administrators to execute arbitrary code v...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Improper input validation in /admin/config/save in User-friendly SVN (USVN) before v1.0.12 and below allows administrators to execute arbitrary code via the fields "siteTitle", "siteIco" and "siteLogo".
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com
- web usvn.info
- web usvn.info