CVE-2024-57408

CVE-2024-57408 affects cool-admin-java v1.0, with an arbitrary file upload vulnerability in the /comm/upload component that allows remote code execution through a crafted file. The Red Hat/PTSecurity and CN/CS reports confirm the issue and recommend disabling the /comm/upload endpoint and restric...