Unrated severityNVD Advisory· Published Oct 15, 2024· Updated Oct 15, 2024
Ragic Enterprise Cloud Database - Arbitrary File Upload
CVE-2024-9985
Description
Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a webshell and use it to execute arbitrary code on the remote server.
Affected products
1- Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.twcert.org.tw/en/cp-139-8153-1120e-2.htmlmitrethird-party-advisory
- www.twcert.org.tw/tw/cp-132-8152-09e81-1.htmlmitrethird-party-advisory
News mentions
0No linked articles in our index yet.