CVE-2024-57248
PoC —CVSS 3.1
6.3 medium
EPSS
3%p87
Published
()
Modified
Description
Directory Traversal in File Upload in Gleamtech FileVista 9.2.0.0 allows remote attackers to achieve Code Execution, Information Disclosure, and Escalation of Privileges via injecting malicious payloads in HTTP requests to manipulate file paths, bypass access controls, and upload malicious files.
- Vendors
- gleamtech
- Products
- filevista
- Weakness
- CWE-22
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
In the news0 stories
No ingested article mentions this CVE yet.