CVE-2024-7694
TeamT5 ThreatSonar Anti-Ransomware - Arbitrary File Upload
In short
TeamT5's ThreatSonar Anti-Ransomware fails to properly check uploaded files, allowing administrators to upload malicious files that execute harmful commands on the server.
Technical detail
The application lacks adequate file content validation on upload endpoints. An authenticated attacker with administrator privileges can bypass file restrictions to upload executable payloads, leading to remote code execution (RCE) on the host system.
Summary generated and translated by AI from the official description.
ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
TeamT5 · ThreatSonar Anti-RansomwareWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →