CVE-2024-4825
Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo
Summary
Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo
Original description
The description as published by the source.
A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- web incibe.es