CVE-2024-10121

CVE-2024-10121 affects wfh45678 Radar up to version 1.0.8, targeting the Interface Handler. The issue allows remote authorization bypass via manipulation of the input /../, with the vulnerability not classified as path traversal. Multiple sources confirm the impact as an authorization bypass affe...

CVE-2024-10120

CVE-2024-10120 (Radar) affects wfh45678 Radar versions up to 1.0.8. A vulnerability exists in the endpoint /services/v1/common/upload where the manipulation of the file argument enables unrestricted file upload. Exploitation can be performed remotely and has been disclosed publicly. Practical imp...