CVE-2024-27114

9.8CRITICAL

A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. If the public view setting is enabled, a attacker can upload a PHP-file that will be avail

게시됨: 9/11/2024업데이트됨: 9/19/2024
NVD에서 보기MITRE에서 보기

설명

A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. If the public view setting is enabled, a attacker can upload a PHP-file that will be available for execution for a few milliseconds before it is removed, leading to execution of code on the underlying system. The vulnerability has been remediated in version 1.52.02.

AI 분석AI 기반

영향받는 제품

soplanningsoplanning

참조