3 matches found
CVE-2024-48448
An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into the tracker comments page...
CVE-2024-48448
An arbitrary file upload vulnerability exists in Huly Platform v0.6.295 . Attackers can exploit this flaw by uploading a crafted HTML file into the tracker comments page , which can lead to arbitrary code execution . To mitigate this risk, users should restrict access to the file upload feature i...
CVE-2024-48448: Improper Neutralization of Input During Web Page Generation
An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into the tracker comments page...