CVE-2024-0196

CVE-2024-0196 (Magic-Api) affects Magic-Api versions up to 2.0.1. The vulnerability is a code injection in an unknown functionality exposed via the HTTP endpoint /resource/file/api/save?auto=1, which can be exploited remotely. Multiple connected sources confirm code execution risk and public disc...