CVE-2024-47655CWE-434

Unrestricted File Upload Vulnerability

High · published October 4, 2024

CVSS v4.0
8.6
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

This vulnerability exists in the Shilpi Client Dashboard due to improper validation of files being uploaded other than the specified extension. An authenticated remote attacker could exploit this vulnerability by uploading malicious file, which could lead to remote code execution on targeted application.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00691 · 52.2th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2024-10-04T12:21Z
EPSS history
Timeline
  • 04 OCT 12:21Z
    Unrestricted File Upload Vulnerability
    cvelistv5