CVE-2024-11315

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells...

CVE-2024-11315

creationtimestamp| type| source ---|---|--- 2024-11-18 06:53:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113502637834127072 2024-11-18 09:01:16+00:00| seen| https://t.me/cvedetector/11293 2026-06-21 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mosijlrs4m2y...

CVE-2024-11315 TRCore DVC - Arbitrary File Upload through Path Traversal

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells...