7 matches found
CVE-2024-48448
An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into the tracker comments page...
CVE-2024-48448
An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into the tracker comments page...
CVE-2024-48448
An arbitrary file upload vulnerability exists in Huly Platform v0.6.295 . Attackers can exploit this flaw by uploading a crafted HTML file into the tracker comments page , which can lead to arbitrary code execution . To mitigate this risk, users should restrict access to the file upload feature i...
Huly Platform 安全漏洞
Huly Platform is an all-in-one project management platform from Huly open source. A security vulnerability exists in Huly Platform version v0.6.295. An attacker can exploit the vulnerability to execute arbitrary code by uploading a specially crafted HTML file to the tracker comment page...
CVE-2024-48448: Improper Neutralization of Input During Web Page Generation
An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into the tracker comments page...
PT-2024-33114 · Unknown · Huly Platform
Name of the Vulnerable Software and Affected Versions: Huly Platform version 0.6.295 Description: The issue allows attackers to execute arbitrary code by uploading a crafted HTML file into the tracker comments page, potentially leading to code execution. Recommendations: For Huly Platform version...
