2024-05-05 02:03:23 +00:00

28 lines
1.1 KiB
JSON

{
"id": "CVE-2024-28269",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-04-30T19:15:23.257",
"lastModified": "2024-04-30T19:35:36.960",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
{
"lang": "en",
"value": "ReCrystallize Server 5.10.0.0 allows administrators to upload files to the server. The file upload is not restricted, leading to the ability to upload of malicious files. This could result in a Remote Code Execution."
},
{
"lang": "es",
"value": "ReCrystallize Server 5.10.0.0 permite a los administradores cargar archivos al servidor. La carga de archivos no est\u00e1 restringida, lo que permite cargar archivos maliciosos. Esto podr\u00eda resultar en una ejecuci\u00f3n remota de c\u00f3digo."
}
],
"metrics": {},
"references": [
{
"url": "https://sensepost.com/blog/2024/from-discovery-to-disclosure-recrystallize-server-vulnerabilities/",
"source": "cve@mitre.org"
},
{
"url": "https://www.recrystallize.com/merchant/ReCrystallize-Server-for-Crysta",
"source": "cve@mitre.org"
}
]
}