CVE-2024-3129mediumCWE-434

CVE-2024-3129: falha de média gravidade em SourceCodester Image Accordion Gallery App

SourceCodester Image Accordion Gallery App add-image.php unrestricted upload

Publicada em 01 abr 2024 · Atualizada em 01 ago 2024

Seguir esta CVE + Monitorar Image Accordion Gallery App

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.7%

A vulnerability was found in SourceCodester Image Accordion Gallery App 1.0. It has been classified as critical. This affects an unknown part of the file /endpoint/add-image.php. The manipulation of the argument image_name leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258873 was assigned to this vulnerability.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Produtos afetados

SourceCodester · Image Accordion Gallery App

Referências

https://github.com/Sospiro014/zday1/blob/main/Image_Accordion_Gallery.md https://vuldb.com/?ctiid.258873 https://vuldb.com/?id.258873 https://vuldb.com/?submit.308188