CVE-2024-12994

CVE-2024-12994 affects running-elephant Datart 1.0.0-rc3. The vulnerability is in the extractModel function of the File Upload component (in /import): crafting or manipulating the file argument leads to deserialization, enabling remote exploitation. Multiple sources confirm affected version and i...

PT-2024-17856 · Unknown · Running-Elephant Datart

Name of the Vulnerable Software and Affected Versions: running-elephant Datart version 1.0.0-rc3 Description: A critical issue affects the extractModel function of the File Upload component, specifically in the /import file. The manipulation of the file argument leads to deserialization. This iss...