Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 6:22 a.m.•14 views

CVE-2024-6945

A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been classified as critical. This affects an unknown part of the file app/Core/Http/Controllers/Profile/ImagesController.php of the component Avatar Upload Page. The manipulation of the argument avatar leads to unrestricted upload. It i...

9.8CVSS9.5AI score0.00585EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/21 8:00 a.m.•14 views

CVE-2024-6945 Flute CMS Avatar Upload Page ImagesController.php unrestricted upload

A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been classified as critical. This affects an unknown part of the file app/Core/Http/Controllers/Profile/ImagesController.php of the component Avatar Upload Page. The manipulation of the argument avatar leads to unrestricted upload. It i...

6.5CVSS7.1AI score0.00585EPSS
SaveExploits0References4
OSV
OSV
•added 2024/07/21 8:00 a.m.•18 views

CVE-2024-6945 Flute CMS Avatar Upload Page ImagesController.php unrestricted upload

A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been classified as critical. This affects an unknown part of the file app/Core/Http/Controllers/Profile/ImagesController.php of the component Avatar Upload Page. The manipulation of the argument avatar leads to unrestricted upload. It i...

5.3CVSS6.2AI score
SaveExploits0References6
CVE
CVE
•added 2024/07/21 8:00 a.m.•53 views

CVE-2024-6945

Flute CMS 0.2.2.4-alpha contains a critical flaw in the Avatar Upload Page component, affecting the file app/Core/Http/Controllers/Profile/ImagesController.php. The vulnerability arises from manipulating the avatar parameter, enabling unrestricted remote upload. Multiple sources confirm exploitat...

9.8CVSS6.5AI score0.00585EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2024/07/21 8:00 a.m.•31 views

CVE-2024-6945 Flute CMS Avatar Upload Page ImagesController.php unrestricted upload

A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been classified as critical. This affects an unknown part of the file app/Core/Http/Controllers/Profile/ImagesController.php of the component Avatar Upload Page. The manipulation of the argument avatar leads to unrestricted upload. It i...

6.5CVSS0.00585EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/21 12:00 a.m.•2 views

CVE-2024-6945: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been classified as critical. This affects an unknown part of the file app/Core/Http/Controllers/Profile/ImagesController.php of the component Avatar Upload Page. The manipulation of the argument avatar leads to unrestricted upload. It i...

9.8CVSS6.2AI score0.00585EPSS
SaveExploits0References1
Rows per page
Query Builder