CVE-2024-36531

2024-06-1015:15:52

[email protected]

web.nvd.nist.gov

cve-2024-36531

nukeviet

nukeviet-egov

arbitrary code execution

vulnerability

admin

extensions

upload

8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /admin/extensions/upload.php component.

References

mat4mee.notion.site/Module-upload-in-nukeViet-leads-to-RCE-01ff3ff4c80d402d8c7c8a2b15a24c33