An issue in aliyundrive-webdav v.2.3.3 and before allows a remote attacker to execute arbitrary code via a crafted payload to the sid parameter in the action_query_qrcode component.
References
Configurations
No configuration.
History
27 Aug 2024, 18:35
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-78 | |
Summary |
|
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
29 Mar 2024, 17:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-03-29 17:15
Updated : 2024-08-27 18:35
NVD link : CVE-2024-29640
Mitre link : CVE-2024-29640
CVE.ORG link : CVE-2024-29640
JSON object : View
Products Affected
No product.
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')