Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-29399

Published: 11/04/2024 Updated: 11/04/2024

Vulnerability Summary

An issue exists in GNU Savane v.3.13 and before, allows a remote malicious user to execute arbitrary code and escalate privileges via a crafted file to the upload.php component.

Github Repositories

https://github.com/ally-petitt/CVE-2024-29399

CVE-2024-29399 reference

CVE-2024-29399 Vulnerability Details Overview In Savane v313 and prior, a lack of validation on uploaded files can allow for privilege escalation Web servers configured according to the installation instructions are vulnerable to Cross-Site Scripting (XSS) In misconfigured web servers this can lead to Remote Code Execution (RCE) CWE Classification: CWE-434: Unrestricted Upl

References

https://github.com/ally-petitt/CVE-2024-29399https://nvd.nist.govhttps://github.com/ally-petitt/CVE-2024-29399
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook