CVE-2024-10201CWE-434

Wellchoose Administrative Management System - Arbitrary File Upload

High · published October 21, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
48.0
In the wild
Unconfirmed
What it is

Administrative Management System from Wellchoose does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload and execute webshells.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00600 · 48.0th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2024-10-21T03:13Z
EPSS history
Timeline
  • 21 OCT 03:13Z
    Wellchoose Administrative Management System - Arbitrary File Upload
    cvelistv5