CVE-2024-41454

An arbitrary file upload vulnerability in the UI login page logo upload function of Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary code via uploading a crafted PHP or HTML file...

CVE-2024-41454

ProcessMaker pm4core-docker version 4.1.21-RC7 contains an arbitrary file upload vulnerability within the logo upload function on the UI login page. An attacker can exploit this by uploading a specially crafted PHP or HTML file to achieve arbitrary code execution . Proof-of-concept exploitation h...

CVE-2024-41454: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the UI login page logo upload function of Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary code via uploading a crafted PHP or HTML file...