CVE-2024-48093

Unrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to achieve Remote Code Execution via uploading and executing malicious files without validating file extensions or content types...

CVE-2024-48093

Unrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to achieve Remote Code Execution via uploading and executing malicious files without validating file extensions or content types...

CVE-2024-48093

Unrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to achieve Remote Code Execution via uploading and executing malicious files without validating file extensions or content types...

CVE-2024-48093: Unrestricted Upload of File with Dangerous Type

Unrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to achieve Remote Code Execution via uploading and executing malicious files without validating file extensions or content types...

CVE-2024-48093

Unrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to achieve Remote Code Execution via uploading and executing malicious files without validating file extensions or content types...

PT-2024-32988 · Operately · Operately

Name of the Vulnerable Software and Affected Versions: Operately version 0.1.0 Description: The issue allows a privileged user to achieve Remote Code Execution via uploading and executing malicious files without validating file extensions or content types in the Discussions tab. Recommendations:...

Operately 安全漏洞

Operately is an open source company management system from Operately, Inc. A security vulnerability exists in Operately version v.0.1.0, which stems from an unrestricted file upload issue that allows a privileged user to remotely execute code by uploading and executing malicious files without...

CVE-2024-48093

The open-source company management system Operately version v.0.1.0 is vulnerable to an Unrestricted File Upload in the Discussions tab . The root cause is a failure to validate file extensions or content types, which allows a privileged user to upload and execute malicious files. This can lead t...