High severity8.8NVD Advisory· Published Apr 12, 2024· Updated Jun 17, 2026
CVE-2024-3705
CVE-2024-3705
Description
Unrestricted file upload vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to send a POST request to the endpoint '/opengnsys/images/M_Icons.php' modifying the file extension, due to lack of file extension verification, resulting in a webshell injection.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- opengnsys.es/web/parche-de-seguridad-cve-2024-370xnvdVendor Advisory
- www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-opengnsysnvdThird Party Advisory
News mentions
0No linked articles in our index yet.