CVE-2024-36811

2024-06-0700:00:00

mitre

github.com

arbitrary file upload

aimeos-core v2024.04

php file

execute arbitrary code

AI Score

8.1

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

An arbitrary file upload vulnerability in the image upload function of aimeos-core v2024.04 allows attackers to execute arbitrary code via uploading a crafted PHP file.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:aimeos:aimeos-core:*:*:*:*:*:*:*:*"
    ],
    "vendor": "aimeos",
    "product": "aimeos-core",
    "versions": [
      {
        "status": "affected",
        "version": "2024.04.1",
        "lessThan": "2024.04.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]