Security Advisory

CVE-2024-12700

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-12-19 22:50:58
Last updated 2024-12-20 17:38:17
Assigner icscert
CVSS score 8.7
State PUBLISHED

Description

There is an unrestricted file upload vulnerability where it is possible for an authenticated user (low privileged) to upload an jsp shell and execute code with the privileges of user running the web server.