CVE-2024-4825
Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo
概要
Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web incibe.es