CVE-2024-23180

Published: 2024-01-23T10:15Z

Last Modified: 2024-11-21T08:57Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated attacker to execute arbitrary code by uploading a specially crafted SVG file. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt