CVE-2024-55371

The open-source personal subscription tracker Wallos versions 2.38.2 and earlier is vulnerable to a file upload flaw within the restore backup function. This vulnerability allows authenticated users (administrator privileges are not required) to upload a ZIP file that the server extracts automati...