Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2024-35591
HistoryMay 24, 2024 - 2:15 p.m.

CVE-2024-35591

2024-05-2414:15:17
CWE-79
[email protected]
web.nvd.nist.gov
2
arbitrary file upload
o2oa v8.3.8
code execution
crafted pdf file
cve-2024-35591

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

AI Score

7.4

Confidence

High

JSON

An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.

Related

cvelist 1
cve 1
vulnrichment 1
cvelist
cvelist
CVE-2024-35591
1976-01-01 00:00:00
cve
cve
CVE-2024-35591
2024-05-24 14:15:17
vulnrichment
vulnrichment
CVE-2024-35591
1976-01-01 00:00:00

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

AI Score

7.4

Confidence

High

JSON
Related for NVD:CVE-2024-35591
cvelist1cve1vulnrichment1