CVE-2024-39715

A code injection vulnerability that allows a low-privileged user with REST API access granted to remotely upload arbitrary files to the VSPC server using REST…

High · published September 7, 2024

CVSS v3.0
8.5
EPSS
1%
Percentile
57.9
In the wild
Unconfirmed
What it is

A code injection vulnerability that allows a low-privileged user with REST API access granted to remotely upload arbitrary files to the VSPC server using REST API, leading to remote code execution on VSPC server.

The record
Technical detail
CVSS v3.0
8.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00854 · 57.9th percentile
Published
2024-09-07T16:11Z
EPSS history
Timeline
  • 07 SEP 16:11Z
    A code injection vulnerability that allows a low-privileged user with REST API access granted to remotely upload arbitrary files to the VSPC server using REST…
    cvelistv5