CVE-2024-46210 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file.
High CVSS: 7.2

CVE-2024-46210

An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file.
Vendor
Redaxo
Product
Redaxo
CWE
CWE-434
Yayın Tarihi
2025-01-10 16:15:28
Güncelleme
2025-06-13 18:24:15
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-434 Redaxo HIGH Redaxo 2025

Referanslar

https://gist.github.com/h4ckr4v3n/26eaa57d94f749b597ede8b404c234df https://github.com/h4ckr4v3n/research_redaxo_5_17_1.git