CVE-2025-24971 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

DumpDrop is a stupid simple file upload application that provides an interface for dragging and dropping files. An OS Command Injection vulnerability was discov…
Critical CVSS: 9.5

CVE-2025-24971

DumpDrop is a stupid simple file upload application that provides an interface for dragging and dropping files. An OS Command Injection vulnerability was discovered in the DumbDrop application, `/upload/init` endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely when the **Apprise Notification** enabled. This issue has been addressed in commit `4ff8469d` and all users are advised to patch. There are no known workarounds for this vulnerability.
Vendor
-
Product
-
CWE
CWE-78
Yayın Tarihi
2025-02-04 19:15:33
Güncelleme
2025-02-04 20:15:51
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

Referanslar