CVE-2024-52302

CVE-2024-52302: Vulnerabilità di Upload File Non Restrittivo in Common-User-Management Panoramica Ho scoperto una vulnerabilità di sicurezza critica in common-user-management , una robusta applicazione Spring Boot con servizi di gestione utenti progettati per controllare dinamicamente l'accesso...

CVE-2024-52302

common-user-management is a robust Spring Boot application featuring user management services designed to control user access dynamically. There is a critical security vulnerability in the application endpoint /api/v1/customer/profile-picture. This endpoint allows file uploads without proper...

PT-2024-35165 · Unknown · Common-User-Management

Name of the Vulnerable Software and Affected Versions: common-user-management affected versions not specified Description: The issue concerns a critical security vulnerability in the application endpoint /api/v1/customer/profile-picture, which allows file uploads without proper validation or...