CVE-2024-4825

9.8CRITICAL

A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, c

Publicado: 5/14/2024Atualizado: 6/27/2025
Ver no NVDVer no MITRE

Descrição

A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure.

Análise IADesenvolvido por IA

Produtos Afetados

agentejocockpit
0.5.5

Referências