Skip to content
OpenAdvisories
High · 8.8 CVE-2024-40546 EUVD-2024-38514GHSA-vh2v-jjwq-3c7m

An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbit…

Published Jul 12, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file.

References