5 matches found
CVE-2024-40455
An arbitrary file deletion vulnerability in ThinkSAAS v3.7 allows attackers to delete arbitrary files via a crafted request...
CVE-2024-40455
An arbitrary file deletion vulnerability in ThinkSAAS v3.7 allows attackers to delete arbitrary files via a crafted request...
CVE-2024-40455
An arbitrary file deletion vulnerability in ThinkSAAS v3.7 allows attackers to delete arbitrary files via a crafted request...
CVE-2024-40455
An arbitrary file deletion vulnerability in ThinkSAAS v3.7 allows attackers to delete arbitrary files via a crafted request...
CVE-2024-40455
ThinkSAAS v3.7 is susceptible to an arbitrary file deletion vulnerability. An attacker can delete arbitrary files by sending a crafted request to the application. This vulnerability is associated with CWE-352 (Cross-Site Request Forgery). While the documents recommend updating to a version contai...