Security Advisory

CVE-2019-9050

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-02-23 19:00:00
Last updated 2024-08-04 21:38:45
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

An issue was discovered in Pluck 4.7.9-dev1. It allows administrators to execute arbitrary code by using action=installmodule to upload a ZIP archive, which is then extracted and executed.