Description
Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function. This vulnerability allows attackers to execute arbitrary code via a crafted JSP file.
Critical · 9.8
CVE-2024-33120
EUVD-2024-30865GHSA-3wvq-9p67-m439
Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function. This v…
Published May 7, 2024 · Updated Jul 9, 2026 · Assigned by mitre