CVE-2024-27480
CriticalSummary
givanz VvvebJs 1.7.2 is vulnerable to insecure file upload, which may allow an attacker to upload malicious files to the server.
Risk Assessment
Risk of server compromise through malicious file upload, potentially leading to data integrity and confidentiality breaches.
Recommendation
Update VvvebJs to the latest version or implement file upload validation measures such as type and size checks.
Other vulnerabilities in VvvebJs
See all- CVE-2024-25182Critical
givanz VvvebJs 1.7.2 suffers from a file upload vulnerability via save.php, which may allow an attacker to upload dangerous files.
- CVE-2024-25181Critical
A critical vulnerability in givanz VvvebJs 1.7.2 allows both Server-Side Request Forgery (SSRF) and arbitrary file reading. It stems from improper handling of user-supplied URLs in the "file_get_contents" function within the "save.php" file.
Original NVD description (English source)
givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.