High · 8.0 CVE-2024-48093 EUVD-2024-42928GHSA-7w36-gg3q-f3vg

Unrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to achieve Remote Code Execution via uploadin…

Published Oct 30, 2024 · Updated Oct 31, 2024 · Assigned by mitre

Description

Unrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to achieve Remote Code Execution via uploading and executing malicious files without validating file extensions or content types.

References

https://youtu.be/rCYIohrQdxM
https://github.com/yamerooo123/CVE/blob/main/CVE-2024-48093/Description.md