CVE-2024-14037 Redsea Cloud eHR Unauthenticated File Upload RCE via PtFjk.mob

Redsea Cloud eHR contains an arbitrary file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading malicious files through the PtFjk.mob servlet endpoint. Attackers can submit a multipart POST request with a JSP webshell disguised using a spoofed...

PT-2026-55263

Name of the Vulnerable Software and Affected Versions Redsea Cloud eHR affected versions not specified Description An arbitrary file upload flaw allows unauthenticated attackers to achieve remote code execution. By sending a multipart POST request to the 'PtFjk.mob' servlet endpoint, an attacker...