CVE-2024-4825
Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo
Résumé
Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web incibe.es