An issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute arbitrary code and escalate privileges via a crafted file to the upload.php component.
oryginał ENCVSS Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:LGnu Savane
APPGnu≤ 3.13
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCELPE
CWE
Powiązane podatności
CVE-2024-27630HIGH7.5ten sam produkt
Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arb...
CVE-2024-27632HIGH8.8ten sam produkt
An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in th...
CVE-2024-27631MEDIUM6.0ten sam produkt
Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate ...
CVE-2026-24061CRITICAL9.8⚠ KEVPL ✓ten sam vendor
GNU Inetutils telnetd: ominięcie uwierzytelnienia przez zmienną USER
CVE-2014-7169CRITICAL9.8⚠ KEVten sam vendor
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the...