CVE-2024-48734

Published: 2024-10-30T21:15Z

Last Modified: 2024-11-04T19:35Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Unrestricted file upload in /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} in SAS Studio 9.4 allows remote attacker to upload malicious files. NOTE: this is disputed by the vendor because file upload is allowed for authorized users. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt