CVE-2024-41454
An arbitrary file upload vulnerability in the UI login page logo upload function of Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary code via uploading a crafted PHP or HTML file.
- Score
- CVSS 3.1 6.5 Medium
- Status
- Deferred - cve@mitre.org
- Published
- 2025-01-15
- Last modified
- 2025-02-03
- Weaknesses
- CWE-434
References
- https://github.com/php-lover-boy/processmaker
