CVE-2024-27480
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
givanz VvvebJs 1.7.2 is vulnerable to insecure file upload, which may allow an attacker to upload malicious files to the server.
Risk Assessment
Risk of server compromise through malicious file upload, potentially leading to data integrity and confidentiality breaches.
Recommendation
Update VvvebJs to the latest version or implement file upload validation measures such as type and size checks.
Other vulnerabilities in VvvebJs
See all- CVE-2024-25182Critical
givanz VvvebJs 1.7.2 suffers from a file upload vulnerability via save.php, which may allow an attacker to upload dangerous files.
- CVE-2024-25181Critical
A critical vulnerability in givanz VvvebJs 1.7.2 allows both Server-Side Request Forgery (SSRF) and arbitrary file reading. It stems from improper handling of user-supplied URLs in the "file_get_contents" function within the "save.php" file.
- CVE-2024-25183High
givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php.
Original NVD description (English source)
givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS