2 matches found
CVE-2024-36858
An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file...
9.8CVSS0.03035EPSS
SaveExploits1References4
CVE-2024-36858: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file...
9.8CVSS6.5AI score0.03035EPSS
SaveExploits1References1
20