Medium severity6.5NVD Advisory· Published Jan 15, 2025· Updated Apr 15, 2026
CVE-2024-41454
CVE-2024-41454
Description
An arbitrary file upload vulnerability in the UI login page logo upload function of Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary code via uploading a crafted PHP or HTML file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: = 4.1.21-RC7
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.