Security Advisory

CVE-2024-13134

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-01-05 08:00:12
Last updated 2025-01-06 15:58:47
Assigner VulDB
CVSS score 5.3
State PUBLISHED

Description

A vulnerability, which was classified as critical, was found in ZeroWdd studentmanager 1.0. Affected is the function addTeacher/editTeacher of the file src/main/Java/com/wdd/studentmanager/controller/TeacherController. java. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.