CVE-2024-41304
An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3 allows attackers to execute arbitrary code via a crafted...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3 allows attackers to execute arbitrary code via a crafted SVG file.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com