exploitDog

CVE-2024-34913

Опубликовано: 15 мая 2024

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

An arbitrary file upload vulnerability in r-pan-scaffolding v5.0 and below allows attackers to execute arbitrary code via uploading a crafted PDF file.

Ссылки

https://github.com/Joying-C/Cross-site-scripting-vulnerability/tree/main/r-pan-scaffolding_Cross_site%20_scripting%20_vulnerability
Exploit
Third Party Advisory
https://github.com/Joying-C/Cross-site-scripting-vulnerability/tree/main/r-pan-scaffolding_Cross_site%20_scripting%20_vulnerability
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:technocking:r-pan-scaffolding:*:*:*:*:*:*:*:*

Версия до 5.0 (включая)

EPSS

Процентиль: 54%

0.00309

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-cxxf-5w8p-wg77

CVSS3: 5.4

github

больше 1 года назад

An arbitrary file upload vulnerability in r-pan-scaffolding v5.0 and below allows attackers to execute arbitrary code via uploading a crafted PDF file.

EPSS

Процентиль: 54%

0.00309

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

CWE-79