4 matches found
CVE-2024-35595
An arbitrary file upload vulnerability in the File Preview function of Xintongda OA v2023.12.30.1 allows attackers to execute arbitrary code via uploading a crafted PDF file...
6.1CVSS7.8AI score0.00362EPSS
SaveExploits0References4
CVE-2024-35595
An arbitrary file upload vulnerability in the File Preview function of Xintongda OA v2023.12.30.1 allows attackers to execute arbitrary code via uploading a crafted PDF file...
7.8AI score0.00362EPSS
SaveExploits0References2
CVE-2024-35595
CVE-2024-35595 affects Xintongda OA v2023.12.30.1 with an arbitrary file upload flaw in the File Preview function. The root cause is an upload handling weakness that can let an attacker craft a PDF to execute arbitrary code on the host. The connected PT-2024-26566 entry corroborates the affected ...
6.1CVSS8.1AI score0.00362EPSS
SaveExploits0References2
20