CVE-2024-42563

An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a crafted HTML file.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2024-08-20

Last modified

2024-08-21

Weaknesses

CWE-434

Affected products

• Erp (Jerryhanjj)

References

• https://gist.github.com/topsky979/f645f99661ff33aed44d65dfa49e36fe