CVE-2024-4825

9.8CRITICAL

A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, c

Publicado: 5/14/2024Actualizado: 6/27/2025
Ver en NVDVer en MITRE

Descripción

A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure.

Análisis IAImpulsado por IA

Productos Afectados

agentejocockpit
0.5.5

Referencias