CVE-2024-24202

creationtimestamp| type| source ---|---|--- 2024-02-08 06:21:41+00:00| seen| https://t.me/ctinow/181177 2024-02-15 19:17:00+00:00| seen| https://t.me/ctinow/185791 2024-03-02 07:36:43+00:00| seen| https://t.me/ctinow/198252...

CVE-2024-24202

CVE-2024-24202 refers to an arbitrary file upload vulnerability in ZenTao components (Community Edition v18.10, Biz v8.10, Max v4.10) exposed at /upgrade/control.php. The root cause is a crafted .txt file upload that allows remote code execution. Affected products are explicitly ZenTao Community ...