CVE-2024-48448

Description

An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into the tracker comments page.

References

https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-48448

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3