CVE-2024-13138: falha de média gravidade em wangl1989 mysiteforme
wangl1989 mysiteforme LocalUploadServiceImpl upload unrestricted upload
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.1epss 0.5%
A vulnerability was found in wangl1989 mysiteforme 1.0. It has been declared as critical. This vulnerability affects the function upload of the file src/main/java/com/mysiteform/admin/service/ipl/LocalUploadServiceImpl. The manipulation of the argument test leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
wangl1989 · mysiteformeCVEs relacionadas — wangl1989 mysiteforme
No mesmo produto, das mais perigosas para as menos.
CVE-2024-13136MEDIUMwangl1989 mysiteforme ShiroConfig.java rememberMeManager deserializationEPSS 0.6%CVE-2024-13139MEDIUMwangl1989 mysiteforme FileController doContent server-side request forgeryEPSS 0.6%CVE-2024-13137MEDIUMwangl1989 mysiteforme SiteController RestResponse cross site scriptingEPSS 0.3%