Lucene search
+L

47 matches found

OSV
OSV
•added 2024/05/15 7:26 p.m.•16 views

CVE-2024-34906

An arbitrary file upload vulnerability in dootask v0.30.13 allows attackers to execute arbitrary code via uploading a crafted PDF file...

6.3CVSS7.7AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2024/05/15 7:26 p.m.•53 views

CVE-2024-34906

An arbitrary file upload vulnerability in dootask v0.30.13 allows attackers to execute arbitrary code via uploading a crafted PDF file...

6.3AI score0.00398EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/15 7:26 p.m.•138 views

CVE-2024-34906

The CVE-2024-34906 entry concerns an arbitrary file upload vulnerability in dootask v0.30.13 that allows an attacker to execute arbitrary code by uploading a crafted PDF file. The connected documents corroborate a PDF-based upload flaw affecting dootask 0.30.13, enabling code execution upon succe...

6.3CVSS7.7AI score0.00398EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/05/15 7:26 p.m.•20 views

CVE-2024-34906

An arbitrary file upload vulnerability in dootask v0.30.13 allows attackers to execute arbitrary code via uploading a crafted PDF file...

7.8AI score0.00398EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/15 12:00 a.m.•2 views

CVE-2024-34906: Improper Neutralization of Input During Web Page Generation

An arbitrary file upload vulnerability in dootask v0.30.13 allows attackers to execute arbitrary code via uploading a crafted PDF file...

6.3CVSS6.5AI score0.00398EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/05/15 12:00 a.m.•15 views

dootask 安全漏洞

dootask is an open source online project task management tool from dootask. A security vulnerability exists in dootask version v0.30.13. An attacker can execute arbitrary code by uploading a specially crafted PDF file...

6.3CVSS7.5AI score0.00398EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/05/15 12:00 a.m.•14 views

PT-2024-26243 · Dootask · Dootask

Name of the Vulnerable Software and Affected Versions: dootask version 0.30.13 Description: The issue allows attackers to execute arbitrary code via uploading a crafted PDF file, exploiting an arbitrary file upload vulnerability. Recommendations: For dootask version 0.30.13, update to a version...

6.3CVSS8.2AI score0.00398EPSS
SaveExploits1References6
Rows per page
Query Builder