Lucene search
MitreVULNRICHMENT:CVE-2024-24026HistoryFeb 08, 2024 - 12:00 a.m.
CVE-2024-24026
2024-02-0800:00:00
mitre
github.com
2
novel-plus
file upload
vulnerability
file download
java2nb system
sysusercontroller
An arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions at com.java2nb.system.controller.SysUserController: uploadImg(). An attacker can pass in specially crafted filename parameter to perform arbitrary File download.
Related
osv
osv
CVE-2024-24026
2024-02-08 01:15:27
cvelist
cvelist
CVE-2024-24026
2024-02-08 00:00:00
nvd
nvd
CVE-2024-24026
2024-02-08 01:15:27
prion
prion
Privilege escalation
2024-02-08 01:15:00
cve
cve
CVE-2024-24026
2024-02-08 01:15:27
AI Score
7
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-24026