CVE-2024-37879: Improper Neutralization of Input During Web Page Generation

Improper input validation in /admin/config/save in User-friendly SVN USVN before v1.0.12 and below allows administrators to execute arbitrary code via the fields "siteTitle", "siteIco" and "siteLogo"...

PT-2024-27805 · Usvn · Usvn

Name of the Vulnerable Software and Affected Versions: User-friendly SVN USVN versions prior to 1.0.12 Description: The issue is related to improper input validation in the /admin/config/save endpoint, allowing administrators to execute arbitrary code via the fields siteTitle, siteIco, and...

CVE-2024-37879

The User-friendly SVN (USVN) tool is vulnerable to arbitrary code execution in versions prior to v1.0.12 . The root cause is improper input validation within the /admin/config/save endpoint, specifically affecting the siteTitle, siteIco, and siteLogo fields. This vulnerability can be exploited by...