← voltar
CVE-2024-23180

CVE-2024-23180

CVSS 8.8 HIGHEPSS 0.9%CWE-434
Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated attacker to execute arbitrary code by uploading a specially crafted SVG file.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
appleple inc. · a-blog cmsappleple inc. · a-blog cms Ver.2.10.x seriesappleple inc. · a-blog cms Ver.2.11.x seriesappleple inc. · a-blog cms Ver.3.0.x seriesappleple inc. · a-blog cms Ver.3.1.x series

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://developer.a-blogcms.jp/blog/news/JVN-34565930.htmlhttps://jvn.jp/en/jp/JVN34565930/