Unrated severityNVD Advisory· Published Feb 8, 2024· Updated Aug 19, 2024

CVE-2024-24202

Description

An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary code via uploading a crafted .txt file.

Affected products

ZenTao/ZenTao Community Editiondescription
Match Agency/BiZllm-fuzzy
Range: =8.10
Ascend/MAXllm-fuzzy
Range: =4.10
Neo4j/Community Editionllm-fuzzy
Range: =18.10

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

clammy-blizzard-8ef.notion.site/Zentao-PMS-Authorized-Remote-Code-Execution-Vulnerability-1077a870c92848e18fe0c139c4fc2176mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000