Skip to content
OpenAdvisories
High · 8.0 CVE-2024-50625 EUVD-2024-45193GHSA-c957-vcxp-6qqg

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A vulnerability in the file upload handling of a web application allows mani…

Published Dec 9, 2024 · Updated Dec 11, 2024 · Assigned by mitre

Description

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A vulnerability in the file upload handling of a web application allows manipulation of file paths via POST requests. This can lead to arbitrary file uploads within specific directories, potentially enabling privilege escalation when combined with other vulnerabilities.

References