Description
An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary code via uploading a crafted .txt file.
Critical · 9.8
CVE-2024-24202
EUVD-2024-21626GHSA-c493-5mp7-c24q
An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 a…
Published Feb 8, 2024 · Updated Aug 19, 2024 · Assigned by mitre