CVE-2024-4825

9.8CRITICAL

A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, c

发布于: 5/14/2024更新于: 6/27/2025
在NVD查看在MITRE查看

描述

A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure.

AI分析AI驱动

受影响产品

agentejocockpit
0.5.5

参考资料