CVE-2024-56973

Insecure Permissions vulnerability in Alvaria, Inc Unified IP Unified Director before v.7.2SP2 allows a remote attacker to execute arbitrary code via the source and filename parameters to the ProcessUploadFromURL.jsp component.

Score
CVSS 3.1 9.8 Critical
Status
Deferred - cve@mitre.org
Published
2025-02-14
Last modified
2025-02-28
Weaknesses
CWE-281

References

 
 
© AVABIS GmbH privacypolicy about