CVE-2019-9050

An issue was discovered in Pluck 4.7.9-dev1

published February 23, 2019

CVSS
—
EPSS
2%
Percentile
80.9
In the wild
Unconfirmed
What it is

An issue was discovered in Pluck 4.7.9-dev1. It allows administrators to execute arbitrary code by using action=installmodule to upload a ZIP archive, which is then extracted and executed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02031 · 80.9th percentile
Published
2019-02-23T19:00Z
EPSS history
Timeline
  • 23 FEB 19:00Z
    An issue was discovered in Pluck 4.7.9-dev1
    cvelistv5