CVE-2024-12700CWE-434

Tibbo AggreGate Network Manager Unrestricted Upload of File with Dangerous Type

High · published December 19, 2024

CVSS v4.0
8.7
EPSS
1%
Percentile
46.5
In the wild
Unconfirmed
What it is

There is an unrestricted file upload vulnerability where it is possible for an authenticated user (low privileged) to upload an jsp shell and execute code with the privileges of user running the web server.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00571 · 46.5th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2024-12-19T22:50Z
EPSS history
Timeline
  • 19 DEC 22:50Z
    Tibbo AggreGate Network Manager Unrestricted Upload of File with Dangerous Type
    cvelistv5