CVE-2024-24202

PoC —

CVSS 3.1

9.8 critical

EPSS

1%p61

Published

Feb 8, 2024 (Feb 8, 2024)

Modified

Jun 17, 2026

Description

An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary code via uploading a crafted .txt file.

Vendors: easycorp
Products: zentao, zentao biz, zentao max
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.