CVE-2024-42733 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary code via a crafted script to the UNC path input
Critical CVSS: 9.8

CVE-2024-42733

An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary code via a crafted script to the UNC path input
Vendor
Docmosis
Product
Tornado
CWE
CWE-94
Yayın Tarihi
2025-03-07 21:15:17
Güncelleme
2025-06-23 19:40:09
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-94 Tornado CRITICAL Docmosis 2025

Referanslar

https://github.com/Docmosis/tornado-docker/issues/14 https://github.com/Marsman1996/pocs/blob/master/redox/CVE-2024-57492/README.md