CVE-2024-48448: XSS
Published Oct 25, 2024
·Updated
An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into the tracker comments page.
Affected Software
1 affected component
Huly Platform
Event History
Oct 25, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-48448?
The severity of CVE-2024-48448 is rated as medium with a score of 6.1.
2
How do I fix CVE-2024-48448?
To fix CVE-2024-48448, ensure that file uploads are properly validated and restrict the types of files that can be uploaded.
3
What type of vulnerability is CVE-2024-48448?
CVE-2024-48448 is classified as an arbitrary file upload vulnerability.
4
What can attackers achieve with CVE-2024-48448?
Attackers can execute arbitrary code by uploading a crafted HTML file to the tracker comments page.
5
What software is affected by CVE-2024-48448?
CVE-2024-48448 affects Huly Platform version 0.6.295.