CVE-2024-24202: Malicious File Upload
An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary code via uploading a crafted .txt file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24202?
CVE-2024-24202 is rated as a critical severity vulnerability due to its potential for arbitrary code execution.
How can I fix CVE-2024-24202?
To fix CVE-2024-24202, update your ZenTao Community Edition to version 18.10 or later, ZenTao Biz to version 8.10 or later, or ZenTao Max to version 4.10 or later.
What systems are affected by CVE-2024-24202?
CVE-2024-24202 affects ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10.
What types of attacks can be executed using CVE-2024-24202?
Attackers can exploit CVE-2024-24202 to upload a crafted .txt file, allowing them to execute arbitrary code on the server.
What is the exploit mechanism of CVE-2024-24202?
The exploit mechanism of CVE-2024-24202 involves leveraging an arbitrary file upload vulnerability in the /upgrade/control.php script.