CVE Catalog

CVE-2024-27480

Critical
Published: Translated: NVD NIST

Summary

givanz VvvebJs 1.7.2 is vulnerable to insecure file upload, which may allow an attacker to upload malicious files to the server.

Risk Assessment

Risk of server compromise through malicious file upload, potentially leading to data integrity and confidentiality breaches.

Recommendation

Update VvvebJs to the latest version or implement file upload validation measures such as type and size checks.

Original NVD description (English source)

givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS