CVE-2024-29272

Published: 2024-03-22T04:15Z

Last Modified: 2024-11-21T09:07Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt