CVE-2024-46625

An authenticated arbitrary file upload vulnerability in the /documentCache/upload endpoint of InfoDom Performa 365 v4.0.1 allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2024-46624

An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their privileges to Administrator via a crafted payload sent to /api/users...

CVE-2024-46625

An authenticated arbitrary file upload vulnerability in the /documentCache/upload endpoint of InfoDom Performa 365 v4.0.1 allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2024-46624

An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their privileges to Administrator via a crafted payload sent to /api/users...

CVE-2024-46624

A privilege escalation vulnerability exists in InfoDom Performa 365 v4.0.1 . Authenticated attackers can elevate their privileges to Administrator by sending a specially crafted payload to the /api/users endpoint. While a Proof of Concept (PoC) is indicated in the exploitation metrics, no specifi...

CVE-2024-46624

An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their privileges to Administrator via a crafted payload sent to /api/users...

CVE-2024-46625

An authenticated arbitrary file upload vulnerability in the /documentCache/upload endpoint of InfoDom Performa 365 v4.0.1 allows attackers to execute arbitrary code via uploading a crafted SVG file...

PT-2024-32079

Name of the Vulnerable Software and Affected Versions InfoDom Performa 365 version 4.0.1 Description An issue in InfoDom Performa 365 allows authenticated attackers to elevate their privileges to Administrator via a crafted payload sent to "/api/users". Recommendations For version 4.0.1, consider...

CVE-2024-46625: Unrestricted Upload of File with Dangerous Type

An authenticated arbitrary file upload vulnerability in the /documentCache/upload endpoint of InfoDom Performa 365 v4.0.1 allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2024-46625

An authenticated arbitrary file upload vulnerability in the /documentCache/upload endpoint of InfoDom Performa 365 v4.0.1 allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2024-46624: Incorrect Default Permissions

An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their privileges to Administrator via a crafted payload sent to /api/users...

PT-2024-32080 · Infodrom · Infodom Performa 365

Name of the Vulnerable Software and Affected Versions: InfoDom Performa 365 version 4.0.1 Description: The issue is related to an authenticated arbitrary file upload vulnerability in the "/documentCache/upload" endpoint. This allows attackers to execute arbitrary code by uploading a crafted SVG...

CVE-2024-46625

The digital platform InfoDom Performa 365 v4.0.1 contains an authenticated arbitrary file upload vulnerability in the /documentCache/upload endpoint. An attacker with necessary privileges can execute arbitrary code by uploading a crafted SVG file . No specific patch version is currently identifie...