Unrated severityNVD Advisory· Published Jan 5, 2025· Updated Jan 6, 2025
wangl1989 mysiteforme LocalUploadServiceImpl upload unrestricted upload
CVE-2024-13138
Description
A vulnerability was found in wangl1989 mysiteforme 1.0. It has been declared as critical. This vulnerability affects the function upload of the file src/main/java/com/mysiteform/admin/service/ipl/LocalUploadServiceImpl. The manipulation of the argument test leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
1- Range: 1.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/wangl1989/mysiteforme/issues/55mitreexploitissue-tracking
- vuldb.commitrethird-party-advisory
- github.com/wangl1989/mysiteforme/issues/55mitreissue-tracking
- vuldb.commitresignaturepermissions-required
- vuldb.commitrevdb-entrytechnical-description
News mentions
0No linked articles in our index yet.