3 matches found
CVE-2024-35591
An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file...
5.4CVSS7.8AI score0.00435EPSS
SaveExploits1References3
CVE-2024-35591
An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file...
5.4CVSS7.4AI score0.00435EPSS
SaveExploits1References1
CVE-2024-35591
The enterprise application development platform O2OA v8.3.8 is affected by an arbitrary file upload vulnerability . This flaw allows an attacker to execute arbitrary code by uploading a crafted PDF file . As a temporary workaround, it is recommended to restrict file uploads or limit the types of ...
7.7AI score0.00435EPSS
SaveExploits1References1Affected Software1
20