CVE-2024-2406

CVE-2024-2406 affects Gacjie Server up to version 1.0. The vulnerability is in the function index handling in /app/admin/controller/Upload.php, where manipulating the file argument enables unrestricted file uploads. Remote exploitation is possible, and the exploit has been disclosed publicly. Mul...