Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 6:22 a.m.10 views

CVE-2024-6945

A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been classified as critical. This affects an unknown part of the file app/Core/Http/Controllers/Profile/ImagesController.php of the component Avatar Upload Page. The manipulation of the argument avatar leads to unrestricted upload. It i...

9.8CVSS9.5AI score0.00585EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/21 8:0 a.m.9 views

CVE-2024-6945 Flute CMS Avatar Upload Page ImagesController.php unrestricted upload

A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been classified as critical. This affects an unknown part of the file app/Core/Http/Controllers/Profile/ImagesController.php of the component Avatar Upload Page. The manipulation of the argument avatar leads to unrestricted upload. It i...

6.5CVSS7.1AI score0.00585EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/07/21 8:0 a.m.17 views

CVE-2024-6945 Flute CMS Avatar Upload Page ImagesController.php unrestricted upload

A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been classified as critical. This affects an unknown part of the file app/Core/Http/Controllers/Profile/ImagesController.php of the component Avatar Upload Page. The manipulation of the argument avatar leads to unrestricted upload. It i...

6.5CVSS0.00585EPSS
Exploits0References4
CVE
CVE
added 2024/07/21 8:0 a.m.44 views

CVE-2024-6945

Flute CMS 0.2.2.4-alpha contains a critical flaw in the Avatar Upload Page component, affecting the file app/Core/Http/Controllers/Profile/ImagesController.php. The vulnerability arises from manipulating the avatar parameter, enabling unrestricted remote upload. Multiple sources confirm exploitat...

9.8CVSS6.5AI score0.00585EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2024/07/21 8:0 a.m.13 views

CVE-2024-6945 Flute CMS Avatar Upload Page ImagesController.php unrestricted upload

A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been classified as critical. This affects an unknown part of the file app/Core/Http/Controllers/Profile/ImagesController.php of the component Avatar Upload Page. The manipulation of the argument avatar leads to unrestricted upload. It i...

5.3CVSS6.2AI score0.00585EPSS
Exploits0References6
Rows per page
Query Builder