CVE-2024-2565: PandaXGO PandaX File Extension upload.go unrestricted upload
A vulnerability was found in PandaXGO PandaX up to 20240310. It has been classified as critical. Affected is an unknown function of the file /apps/system/router/upload.go of the component File Extension Handler. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257064.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2565?
CVE-2024-2565 has been classified as a critical vulnerability.
How does CVE-2024-2565 exploit the system?
CVE-2024-2565 exploits the system through unrestricted file uploads via an unknown function in the File Extension Handler.
Which versions of PandaXGO are affected by CVE-2024-2565?
CVE-2024-2565 affects PandaXGO versions up to and including 20240310.
Can CVE-2024-2565 lead to unauthorized access?
Yes, CVE-2024-2565 can potentially allow attackers to upload malicious files, leading to unauthorized access.
How do I mitigate the risks associated with CVE-2024-2565?
To mitigate the risks, ensure that you update PandaXGO to the latest version that addresses CVE-2024-2565.