Description
An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary code via uploading a crafted file.
Critical · 9.8
CVE-2024-25274
EUVD-2024-22610GHSA-9p2g-j2pw-qg9p
An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary code…
Published Feb 20, 2024 · Updated Aug 29, 2024 · Assigned by mitre