Description
An arbitrary file upload vulnerability in the UI login page logo upload function of Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary code via uploading a crafted PHP or HTML file.
Medium · 6.5
CVE-2024-41454
EUVD-2024-38926GHSA-g8vj-85m9-crfq
An arbitrary file upload vulnerability in the UI login page logo upload function of Process Maker pm4core-docker 4.1.21-RC7 allows attacker…
Published Jan 15, 2025 · Updated Feb 3, 2025 · Assigned by mitre