Lucene search

K
osvGoogleOSV:CVE-2024-29272
HistoryMar 22, 2024 - 4:15 a.m.

CVE-2024-29272

2024-03-2204:15:11
Google
osv.dev
3
arbitrary file upload
vvvebjs
remote attackers
arbitrary code execution
sensitive information

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

22.6%

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php.

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

22.6%